CVE-2008-2166 Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via un...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system web server | = 6.1 | No fix listed |
| sun java system web server | = 7.0 | No fix listed |
References
- 30133 third-party-advisory vendor-advisory
- 231467 patch vendor-advisory
- 29087 patch vdb-entry
- 1019987 patch vdb-entry
- ADV-2008-1455 vdb-entry
- javasystem-search-xss(42263) vdb-entry