cbcvebase.
CVE-2008-2166
published 2008-05-13

CVE-2008-2166: Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to…

medium4.3CVSS 3.1
AVNACMAuNCNIPAN
Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.

Affected

2 ranges
VendorProductVersion rangeFixed in
sunjava_system_web_server
sunjava_system_web_server