CVE-2008-0867 Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea systems aqualogic interaction | = 6.1 | No fix listed |
| bea systems aqualogic interaction | = 6.1-mp1 | No fix listed |
| bea systems plumtree foundation | = 6.0 | No fix listed |
| bea systems plumtree foundation | = 6.0-sp1 | No fix listed |
References
- BEA08-186.00 vendor-advisory
- 29040 third-party-advisory vendor-advisory
- www.procheckup.com
- 20080219 PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals mailing-list
- 1019440 vdb-entry
- ADV-2008-0610 vdb-entry