CVEvulnerability
CVE-2008-1037
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCenter 8.2.2 allows remote attackers to inject arbitrary web script or HTML via the FILELIST parameter to an arbitrary component, which triggers injection into an Error Report page.
Affected configurations
• packeteer packetshaper 8.2.2
• packeteer policycenter 8.2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/29119 secunia.com
- http://securityreason.com/securityalert/3701 securityreason.com
- http://www.securityfocus.com/archive/1/488712/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27982 Exploit
- http://www.securitytracker.com/id?1019501 www.securitytracker.com
- http://secunia.com/advisories/29119 secunia.com
- http://securityreason.com/securityalert/3701 securityreason.com
- http://www.securityfocus.com/archive/1/488712/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27982 Exploit
- http://www.securitytracker.com/id?1019501 www.securitytracker.com