← back
CVE-2008-0265

CVE-2008-0265

EPSS 3.5%
Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, and (5) list_asm.jsp in tmui/Control/jspmap/tmui/system/log/; and (6) list.jsp in certain directories.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/31024unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/28505http://securityreason.com/securityalert/3545https://exchange.xforce.ibmcloud.com/vulnerabilities/39632http://www.securityfocus.com/archive/1/486217/100/0/threadedhttp://www.securityfocus.com/bid/27272http://www.securitytracker.com/id?1019190http://www.vupen.com/english/advisories/2008/0181