Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1208. PoCs published by Henri Lindberg.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Check Point VPN-1 UTM Edge by injecting a malicious script via the 'user' parameter in a form submission. The script is executed in the context of the affected site when the form is auto-submitted on page load.
Description
Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to inject arbitrary web script or HTML via the user parameter.
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Check Point VPN-1 UTM Edge by injecting a malicious script via the 'user' parameter in a form submission. The script is executed in the context of the affected site when the form is auto-submitted on page load.