Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter.

Oracle iPlanet Web Server 7.0.12 Solaris_x86: Update Release patch.
Date this patch was last updated by Sun : Aug/26/11

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch.
Date this patch was last updated by Sun : Aug/19/11

Web Server 6.1: Sun ONE Web Server 6.1 Patch WS61SP13.
Date this patch was last updated by Sun : Sep/20/10

ID	Name	Product	Family	Severity
107932	Solaris 10 (x86) : 125438-22	Nessus	Solaris Local Security Checks	high
107431	Solaris 10 (sparc) : 125437-22	Nessus	Solaris Local Security Checks	high
107295	Solaris 10 (sparc) : 116648-25	Nessus	Solaris Local Security Checks	high
27039	Solaris 9 (x86) : 125438-22	Nessus	Solaris Local Security Checks	high
27023	Solaris 9 (sparc) : 125437-22	Nessus	Solaris Local Security Checks	high
27010	Solaris 8 (sparc) : 125437-22	Nessus	Solaris Local Security Checks	high
23519	Solaris 9 (sparc) : 116648-25	Nessus	Solaris Local Security Checks	high
23381	Solaris 8 (sparc) : 116648-25	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2008-2518

medium

Tenable Plugins

high

high

high

high

high

high

high

high