Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java系统Web服务器高级搜索机制跨站脚本漏洞
Vulnerability Description
Oracle Sun Java System Web Server是美国甲骨文（Oracle）公司的一款专为大中型业务应用程序开发的Web服务器。 Sun Java系统Web服务器的高级搜索机制没有正确地过滤某些用户输入，远程非特权可以通过提交恶意搜索请求执行跨站脚本攻击，导致用户在客户端的web浏览器中执行任意JavaScript命令，这可能允许远程用户窃取cookie信息、劫持会话或导致损失数据保密性。
CVSS Information
N/A
Vulnerability Type
N/A