CVE-2008-2751

总结

Sun Java System Application Server 9.1_01 中的 Glassfish Web 管理界面存在多个跨站脚本（XSS）漏洞，允许远程攻击者通过向 (a) resourceNode/customResourceNew.jsf 传递 (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew、(2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType、(3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass 或 (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc 参数；向 (b) resourceNode/externalResourceNew.jsf 传递 (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew、(6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType、(7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass、(8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup 或 (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc 参数；向 (c) resourceNode/jmsDestinationNew.jsf 传递 (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi、(11) propertyForm:propertySheet:propertSectionTextField:nameProp:name 或 (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc 参数；向 (d) resourceNode/jmsConnectionNew.jsf 传递 (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi 或 (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd 参数；向 (e) resourceNode/jdbcResourceNew.jsf 传递 (15) propertyForm:propertySheet:propertSectionTextField:jndiProp:jnditext 或 (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc 参数；向 (f) applications/lifecycleModulesNew.jsf 传递 (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name、(18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname 或 (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder 参数；或向 (g) resourceNode/jdbcConnectionPoolNew1.jsf 传递 (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name、(21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType 或 (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db 参数，注入任意 Web 脚本或 HTML。