CVE-2008-0239
Sun Java System Identity Manager 6.0 SP1-SP3, 7.0, 7.1 - Cross-Site Scripting
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-0239. PoCs published by Jan Fry & Adrian Pastor.
AI-analyzed exploit summary The provided text describes an XSS vulnerability in Sun Java System Identity Manager due to insufficient input sanitization. It includes a proof-of-concept URL demonstrating the issue but does not contain executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.
Exploits (3)
The provided text describes an XSS vulnerability in Sun Java System Identity Manager due to insufficient input sanitization. It includes a proof-of-concept URL demonstrating the issue but does not contain executable exploit code.
This exploit demonstrates XSS vulnerabilities in Sun Java System Identity Manager by injecting HTML and JavaScript via unsanitized input parameters in the login.jsp page. The PoC shows how arbitrary script execution can lead to cookie theft or site manipulation.
The provided text describes an XSS vulnerability in Sun Java System Identity Manager due to insufficient input sanitization. It includes a proof-of-concept URL demonstrating the issue but does not contain executable exploit code.