Security Advisory

CVE-2008-4918

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-11-04 20:00:00

Last updated 2024-08-07 10:31:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka "universal website hijacking."

← Browse all CVEs View on cve.org ↗