Lucene search
HistoryJan 18, 2007 - 12:28 a.m.
CVE-2007-0302
cve
2007
0302
xss
instantasp
logon.aspx
members1.aspx
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.4%
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Username and (3) Update parameters to (b) Members1.aspx.
Affected configurations
Node
instantaspinstantaspMatch4.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| instantasp:instantasp | instantasp | eq | 4.1.0 |
Related
nvd
nvd
CVE-2007-0302
2007-01-18 00:28:00
prion
prion
Cross site scripting
2007-01-18 00:28:00
cvelist
cvelist
CVE-2007-0302
2007-01-18 00:00:00
securityvulns
securityvulns
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.4%
Related for CVE-2007-0302