CVE-2008-2462

Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
VendorProductVersion
cauchoresin
𝑥
< 3.0.25
cauchoresin
3.1.0 ≤
𝑥
< 3.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/30845
http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
http://www.kb.cert.org/vuls/id/305208
http://www.securityfocus.com/bid/29948
http://www.securitytracker.com/id?1020372
http://www.vupen.com/english/advisories/2008/1930/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43367
http://secunia.com/advisories/30845
http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
http://www.kb.cert.org/vuls/id/305208
http://www.securityfocus.com/bid/29948
http://www.securitytracker.com/id?1020372
http://www.vupen.com/english/advisories/2008/1930/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43367