CVE-2008-2462

Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

• CWE-79

• http://secunia.com/advisories/30845Third Party Advisory
• http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
• http://www.kb.cert.org/vuls/id/305208Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/29948Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020372Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1930/referencesThird Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43367Third Party Advisory, VDB Entry
• http://secunia.com/advisories/30845Third Party Advisory
• http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
• http://www.kb.cert.org/vuls/id/305208Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/29948Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020372Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1930/referencesThird Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43367Third Party Advisory, VDB Entry

Published

Jun 30, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2456SQL injection vulnerability in index.php in ComicShout 2.5 a…
• CVE-2008-2457SQL injection vulnerability in jokes_category.php in PHP-Jok…
• CVE-2008-2458Cross-site scripting (XSS) vulnerability in index.php in Sta…
• CVE-2008-2459Directory traversal vulnerability in page.php in Entertainme…
• CVE-2008-2460SQL injection vulnerability in faq.php in vBulletin 3.7.0 Go…
• CVE-2008-2461SQL injection vulnerability in index.php in Netious CMS 0.4 …
• CVE-2008-2463The Microsoft Office Snapshot Viewer ActiveX control in snap…
• CVE-2008-2464The mld_input function in sys/netinet6/mld6.c in the kernel …
• CVE-2008-2468Multiple buffer overflows in the QIP Server Service (aka qip…
• CVE-2008-2469Heap-based buffer overflow in the SPF_dns_resolv_lookup func…
• CVE-2008-2470The InstallShield Update Service Agent ActiveX control in is…
• CVE-2008-2474Buffer overflow in x87 before 3.5.5 in ABB Process Communica…