CVE-2008-1037

Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCenter 8.2.2 allows remote attackers to inject arbitrary web script or HTML via the FILELIST parameter to an arbitrary component, which triggers injection into an Error Report page.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.48% chance of exploitation in the next 30 days, 73rd percentile

Published

2008-02-27

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31298

Security advisories

• http://www.securityfocus.com/bid/27982

References

• CVE Record
• NVD entry