← Database

CVE-2008-2166

MEDIUM CVSS: 4.3 Published: 2008-05-13 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.

Affected Platforms

Sun Java System Web Server

Weakness Type

CWE-79

References