CVE-2008-2751 in GlassFish Server
Riassunto
di VulDB • 22/06/2026
Multiple vulnerabilità cross-site scripting (XSS) nell'interfaccia webadmin di Glassfish in Sun Java System Application Server 9.1_01 consentono ad attaccanti remoti di iniettare script Web o HTML arbitrari tramite i parametri: (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass o (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc verso il file (a) resourceNode/customResourceNew.jsf; i parametri: (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, (8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup o (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc verso il file (b) resourceNode/externalResourceNew.jsf; i parametri: (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi, (11) propertyForm:propertySheet:propertSectionTextField:nameProp:name o (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc verso il file (c) resourceNode/jmsDestinationNew.jsf; i parametri: (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi o (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd verso il file (d) resourceNode/jmsConnectionNew.jsf; i parametri: (15) propertyForm:propertySheet:propertSectionTextField:jndiProp:jnditext o (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc verso il file (e) resourceNode/jdbcResourceNew.jsf; i parametri: (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name, (18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname o (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder verso il file (f) applications/lifecycleModulesNew.jsf; oppure i parametri: (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name, (21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType o (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db verso il file (g) resourceNode/jdbcConnectionPoolNew1.jsf.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.