CVE-2008-7271
Eclipse IDE - Cross-Site Scripting via Help Contents Search or Working Set Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-7271. PoCs published by Rob.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Eclipse IDE 3.3.2, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action to help/advanced/workingSetManager.jsp, a different issue than CVE-2010-4647.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in Eclipse IDE 3.3.2, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Eclipse IDE 3.3.2 by injecting arbitrary JavaScript code via the 'searchWord' parameter in the searchView.jsp page. The PoC shows how an attacker can execute malicious scripts in the context of the affected site.