CVE-2008-2518

published 2008-06-03

CVE-2008-2518: Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sun	java_system_web_server	—	—
sun	java_system_web_server	—	—

CWE-79