Description

Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.

Remediation

References

CVE-2008-5266

Related Vulnerabilities

Squid Improper Synchronization Vulnerability (CVE-2020-14059)

WordPress Plugin WordPress Robots.txt optimization (+ XML Sitemap)-Website traffic, SEO & ranking Booster Security Bypass (1.2.5.1)

Oracle HTTP Server Inadequate Encryption Strength Vulnerability (CVE-2013-2566)

Oracle JRE Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-21011)

WordPress Plugin Export any WordPress data to XML/CSV SQL Injection (1.3.4)

Severity

Medium

Classification

CVE-2008-5266 CWE-707

Tags

Missing Update Known Vulnerabilities