Lucene search

[email protected]CVE-2007-0798

HistoryFeb 06, 2007 - 7:28 p.m.

CVE-2007-0798

2007-02-0619:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0798

cross-site scripting

xss

ublog reload

security vulnerabilities

web script injection

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (2) badword.asp, (3) polls.asp, and (4) users.asp.

CPENameOperatorVersion
uapplication:ublog_reloaduapplication ublog reloadeq1.0.5

CPE	Name	Operator	Version
uapplication:ublog_reload	uapplication ublog reload	eq	1.0.5

References

osvdb.org/33641

osvdb.org/33642

osvdb.org/33643

osvdb.org/33644

www.hackerscenter.com/archive/view.asp?id=27270

www.securityfocus.com/archive/1/459027/100/0/threaded

www.securityfocus.com/bid/22382

exchange.xforce.ibmcloud.com/vulnerabilities/32185

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON

Related for CVE-2007-0798

prion1 securityvulns1