CVE-2008-0867

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bea_systems:aqualogic_interaction:6.1:*:*:*:*:*:*:*
cpe:2.3:a:bea_systems:aqualogic_interaction:6.1:mp1:*:*:*:*:*:*
cpe:2.3:a:bea_systems:plumtree_foundation:6.0:*:*:*:*:*:*:*
cpe:2.3:a:bea_systems:plumtree_foundation:6.0:sp1:*:*:*:*:*:*

History

21 Nov 2024, 00:43

Type Values Removed Values Added
References () http://dev2dev.bea.com/pub/advisory/259 - () http://dev2dev.bea.com/pub/advisory/259 -
References () http://secunia.com/advisories/29040 - Vendor Advisory () http://secunia.com/advisories/29040 - Vendor Advisory
References () http://www.procheckup.com/Vulnerability_PR06-12.php - () http://www.procheckup.com/Vulnerability_PR06-12.php -
References () http://www.securityfocus.com/archive/1/488346/100/100/threaded - () http://www.securityfocus.com/archive/1/488346/100/100/threaded -
References () http://www.securitytracker.com/id?1019440 - () http://www.securitytracker.com/id?1019440 -
References () http://www.vupen.com/english/advisories/2008/0610 - () http://www.vupen.com/english/advisories/2008/0610 -

Information

Published : 2008-02-21 01:44

Updated : 2024-11-21 00:43


NVD link : CVE-2008-0867

Mitre link : CVE-2008-0867

CVE.ORG link : CVE-2008-0867


JSON object : View

Products Affected

bea_systems

  • aqualogic_interaction
  • plumtree_foundation
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')