CVE-2009-1934
05.06.2009, 16:00
Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.
| Vendor | Product | Version |
|---|---|---|
| sun | java_system_web_server | 6.1:sp10 |
| sun | java_system_web_server | 6.1:sp4 |
| sun | java_system_web_server | 6.1:sp5 |
| sun | java_system_web_server | 6.1:sp6 |
| sun | java_system_web_server | 6.1:sp7 |
| sun | java_system_web_server | 6.1:sp8 |
| sun | java_system_web_server | 6.1:sp9 |
| sun | one_web_server | 6.1 |
| sun | one_web_server | 6.1:sp1 |
| sun | one_web_server | 6.1:sp2 |
| sun | one_web_server | 6.1:sp3 |
| sun | java_system_web_server | 6.1:sp10 |
| sun | java_system_web_server | 6.1:sp4 |
| sun | java_system_web_server | 6.1:sp5 |
| sun | java_system_web_server | 6.1:sp6 |
| sun | java_system_web_server | 6.1:sp7 |
| sun | java_system_web_server | 6.1:sp8 |
| sun | java_system_web_server | 6.1:sp9 |
| sun | one_web_server | 6.1 |
| sun | one_web_server | 6.1:sp1 |
| sun | one_web_server | 6.1:sp2 |
| sun | one_web_server | 6.1:sp3 |
| sun | java_system_web_server | 6.1:sp10 |
| sun | java_system_web_server | 6.1:sp4 |
| sun | java_system_web_server | 6.1:sp5 |
| sun | java_system_web_server | 6.1:sp6 |
| sun | java_system_web_server | 6.1:sp7 |
| sun | java_system_web_server | 6.1:sp8 |
| sun | java_system_web_server | 6.1:sp9 |
| sun | one_web_server | 6.1 |
| sun | one_web_server | 6.1:sp1 |
| sun | one_web_server | 6.1:sp2 |
| sun | one_web_server | 6.1:sp3 |
| sun | java_system_web_server | 6.1:sp10 |
| sun | java_system_web_server | 6.1:sp4 |
| sun | java_system_web_server | 6.1:sp5 |
| sun | java_system_web_server | 6.1:sp6 |
| sun | java_system_web_server | 6.1:sp7 |
| sun | java_system_web_server | 6.1:sp8 |
| sun | java_system_web_server | 6.1:sp9 |
| sun | one_web_server | 6.1 |
| sun | one_web_server | 6.1:sp1 |
| sun | one_web_server | 6.1:sp2 |
| sun | one_web_server | 6.1:sp3 |
| sun | java_system_web_server | 6.1:sp10 |
| sun | java_system_web_server | 6.1:sp4 |
| sun | java_system_web_server | 6.1:sp5 |
| sun | java_system_web_server | 6.1:sp6 |
| sun | java_system_web_server | 6.1:sp7 |
| sun | java_system_web_server | 6.1:sp8 |
| sun | java_system_web_server | 6.1:sp9 |
| sun | one_web_server | 6.1 |
| sun | one_web_server | 6.1:sp1 |
| sun | one_web_server | 6.1:sp2 |
| sun | one_web_server | 6.1:sp3 |
| sun | java_system_web_server | 6.1:sp10 |
| sun | java_system_web_server | 6.1:sp4 |
| sun | java_system_web_server | 6.1:sp48 |
| sun | java_system_web_server | 6.1:sp5 |
| sun | java_system_web_server | 6.1:sp6 |
| sun | java_system_web_server | 6.1:sp7 |
| sun | java_system_web_server | 6.1:sp9 |
| sun | one_web_server | 6.1 |
| sun | one_web_server | 6.1:sp1 |
| sun | one_web_server | 6.1:sp2 |
| sun | one_web_server | 6.1:sp3 |
𝑥
= Vulnerable software versions
References