Description

Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.

Remediation

References

CVE-2008-5266

Related Vulnerabilities

WordPress Plugin Captcha by BestWebSoft SQL Injection (4.1.4)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29510)

Oracle Database Server CVE-2015-0370 Vulnerability (CVE-2015-0370)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46243)

WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.42)

Severity

Medium

Classification

CVE-2008-5266 CWE-707

Tags

Missing Update Known Vulnerabilities