CVE-2008-2462

EUVD-2008-2457
Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
cauchoresin
𝑥
< 3.0.25
cauchoresin
3.1.0 ≤
𝑥
< 3.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/30845
http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
http://www.kb.cert.org/vuls/id/305208
http://www.securityfocus.com/bid/29948
http://www.securitytracker.com/id?1020372
http://www.vupen.com/english/advisories/2008/1930/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43367
http://secunia.com/advisories/30845
http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
http://www.kb.cert.org/vuls/id/305208
http://www.securityfocus.com/bid/29948
http://www.securitytracker.com/id?1020372
http://www.vupen.com/english/advisories/2008/1930/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43367