Description

Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

Remediation

References

CVE-2008-2462

Related Vulnerabilities

Oracle JRE CVE-2022-21248 Vulnerability (CVE-2022-21248)

WordPress Plugin WordPress File Upload Directory Traversal (4.12.2)

WordPress Plugin Slideshow Pro 'upload.php' Arbitrary File Upload (2.1)

PostgreSQL Numeric Errors Vulnerability (CVE-2010-0442)

Oracle Application Server CVE-2007-5516 Vulnerability (CVE-2007-5516)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2008-2462