CVE-2008-0240

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/help/index.jsp?helpUrl' Remote Frame Injection2008-01-09 · webapps · jsp · Verified

Impact

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/28356
• http://securityreason.com/securityalert/3535
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1
• http://www.procheckup.com/Vulnerability_PR07-10.php
• http://www.securityfocus.com/archive/1/486076/100/0/threaded
• http://www.securityfocus.com/bid/27214
• http://www.vupen.com/english/advisories/2008/0089
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39586
• http://secunia.com/advisories/28356
• http://securityreason.com/securityalert/3535
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1
• http://www.procheckup.com/Vulnerability_PR07-10.php
• http://www.securityfocus.com/archive/1/486076/100/0/threaded
• http://www.securityfocus.com/bid/27214
• http://www.vupen.com/english/advisories/2008/0089
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39586