Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1180. PoCs published by Richard Brain.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in Juniper Networks Secure Access 2000 by injecting malicious JavaScript via the 'delivery_mode' parameter in the URL. The PoC shows how arbitrary script code can be executed in the context of the affected site.
Description
Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the delivery_mode parameter.
Exploits (1)
This exploit demonstrates a reflected XSS vulnerability in Juniper Networks Secure Access 2000 by injecting malicious JavaScript via the 'delivery_mode' parameter in the URL. The PoC shows how arbitrary script code can be executed in the context of the affected site.