CVE-2008-0838

Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) error and (2) go parameters to the login page.

Link	Resource
http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-02-13
http://www.sophos.com/support/knowledgebase/article/34733.html
http://www.securityfocus.com/bid/27813	Exploit
http://secunia.com/advisories/28961	Vendor Advisory
http://www.securitytracker.com/id?1019427
http://securityreason.com/securityalert/3673
http://www.vupen.com/english/advisories/2008/0574
http://www.securityfocus.com/archive/1/488206/100/0/threaded

Configuration 1

cpe:2.3:a:sophos:es4000:2.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:sophos:es1000:2.1.0.0:*:*:*:*:*:*:*

---

Published : 2008-02-20 09:44

Updated : 2018-10-15 10:03

---

NVD link : CVE-2008-0838

Mitre link : CVE-2008-0838

No products.

CWE-79