CVE-2008-1037

Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCenter 8.2.2 allows remote attackers to inject arbitrary web script or HTML via the FILELIST parameter to an arbitrary component, which triggers injection into an Error Report page.

Link	Resource
http://www.securityfocus.com/bid/27982	Exploit
http://www.securitytracker.com/id?1019501
http://secunia.com/advisories/29119
http://securityreason.com/securityalert/3701
http://www.securityfocus.com/archive/1/488712/100/0/threaded

Configuration 1

cpe:2.3:a:packeteer:packetshaper:8.2.2:*:*:*:*:*:*:* cpe:2.3:a:packeteer:policycenter:8.2.2:*:*:*:*:*:*:*

---

Published : 2008-02-27 07:44

Updated : 2018-10-11 08:29

---

NVD link : CVE-2008-1037

Mitre link : CVE-2008-1037

No products.

CWE-79