CVE-2008-0240 | BDVDB-2026-28663 Detail
Description#
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/486076/100/0/threaded
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1
- http://www.vupen.com/english/advisories/2008/0089
- http://secunia.com/advisories/28356
- http://securityreason.com/securityalert/3535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39586
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1
- http://www.procheckup.com/Vulnerability_PR07-10.php
- http://www.securityfocus.com/bid/27214
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.