VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jan 13, 2011· Updated Apr 29, 2026

CVE-2008-7271

CVE-2008-7271

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action to help/advanced/workingSetManager.jsp, a different issue than CVE-2010-4647.

Affected products

2
  • Eclipse/Eclipse Ide2 versions
    cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:*
    • cpe:2.3:a:eclipse:eclipse_ide:3.3.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.