Lucene search

[email protected]CVE-2007-0534

HistoryJan 26, 2007 - 1:28 a.m.

CVE-2007-0534

2007-01-2601:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0534

cross-site scripting

xss

drupal

vulnerabilities

nvd

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules for Drupal allow remote authenticated users to inject arbitrary web script or HTML via (a) certain “fields on project nodes” or (b) “certain project-specific settings regarding issue tracking.”

CPENameOperatorVersion
drupal:project_issue_tracking_moduledrupal project issue tracking moduleeq4.7.0
drupal:project_issue_tracking_moduledrupal project issue tracking modulele5
drupal:projectdrupal projectle5
drupal:projectdrupal projecteq4.6.0

CPE	Name	Operator	Version
drupal:project_issue_tracking_module	drupal project issue tracking module	eq	4.7.0
drupal:project_issue_tracking_module	drupal project issue tracking module	le	5
drupal:project	drupal project	le	5
drupal:project	drupal project	eq	4.6.0

References

drupal.org/node/112146

osvdb.org/32133

secunia.com/advisories/23908

www.securityfocus.com/bid/22224

www.vupen.com/english/advisories/2007/0312

exchange.xforce.ibmcloud.com/vulnerabilities/31728

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for CVE-2007-0534

cvelist1 prion1 securityvulns1