VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 13, 2011· Updated Jun 16, 2026

CVE-2008-7271

CVE-2008-7271

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action to help/advanced/workingSetManager.jsp, a different issue than CVE-2010-4647.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Eclipse/Eclipse Ide3 versions
    cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:eclipse:eclipse_ide:*:*:*:*:*:*:*:*
    • cpe:2.3:a:eclipse:eclipse_ide:3.3.2:*:*:*:*:*:*:*
    • (no CPE)
  • Eclipse/Help Contentsllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.