Vulnerability in Sun Iplanet_web_server

CVE-2007-0183

Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the detail…

EPSS: 0.038 (88.5th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (x_refsource_OSVDB, vdb-entry)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)