Lucene search

[email protected]CVE-2007-0529

HistoryJan 26, 2007 - 1:28 a.m.

CVE-2007-0529

2007-01-2601:28:00

[email protected]

web.nvd.nist.gov

cve-2007-0529

cross-site scripting

xss

php link directory

phpld

remote attackers

validation functionality

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

Cross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link Directory (phpLD) 3.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted link, which is triggered when the administrator uses the “Validate Links” functionality.

Affected configurations

NVD

Node

php_link_directoryphp_link_directoryRange≤3.0.6

CPENameOperatorVersion
php_link_directory:php_link_directoryphp link directoryle3.0.6

CPE	Name	Operator	Version
php_link_directory:php_link_directory	php link directory	le	3.0.6

References

osvdb.org/32952

www.securityfocus.com/archive/1/457672/100/0/threaded

www.smilehouse.com/advisory/phplinkdirectory_070121.txt

exchange.xforce.ibmcloud.com/vulnerabilities/31662

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for CVE-2007-0529

cvelist1 nvd1 prion1 securityvulns1