CVE-2008-0240
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-0240
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun Java System Identity Manager /idm/help/index.jsp' 多个输入验证漏洞'
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sun Java System Communications Express为Sun Java通讯套件提供了WEB客户端，允许通过浏览器管理邮件、日历、任务等。 Sun Java System Identity Manager 6.0 SP1到SP3,7.0以及7.1中的/idm/help/index.jsp允许远程攻击者借助helpUrl参数从任意网站中注入frames和执行网络仿冒攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-0240
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-0240
Please Login to view more intelligence information
- http://www.procheckup.com/Vulnerability_PR07-10.phpx_refsource_MISC
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1vendor-advisoryx_refsource_SUNALERT
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1vendor-advisoryx_refsource_SUNALERT
- https://nvd.nist.gov/vuln/detail/CVE-2008-0240
Same Patch Batch · n/a · 2008-01-11 · 13 CVEs total
| CVE-2008-0239 | Sun Java System Identity Manager 多个输入验证漏洞 | |
| CVE-2008-0241 | Sun Java System Identity Manager '/idm/user/login.jsp' 多个输入验证漏洞 | |
| CVE-2008-0238 | Xine-lib 'input/libreal/rmff.c' 缓冲区溢出漏洞 | |
| CVE-2007-6018 | Horde IMP及Groupware Webmail Edition多个输入验证漏洞 | |
| CVE-2008-0233 | Zero CMS 权限许可和访问控制漏洞 | |
| CVE-2008-0234 | Apple QuickTime RTSP连接状态显示远程溢出漏洞 | |
| CVE-2008-0235 | RETIRED: Microsoft VFP_OLE_Server ActiveX Control 远程命令破坏漏洞 | |
| CVE-2008-0236 | Microsoft visual_foxpro 设计错误漏洞 | |
| CVE-2008-0237 | Microsoft rich_textbox control 输入验证漏洞 | |
| CVE-2008-0230 | Osdate 'php121db.php' 代码注入漏洞 | |
| CVE-2008-0231 | Tuned_studios classic_theme 'index.php' 目录遍历漏洞 | |
| CVE-2008-0232 | Zero CMS 任意文件上传漏洞和多个SQL注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem - CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin
V. Comments for CVE-2008-0240
No comments yet