Lucene search

[email protected]CVE-2007-0846

HistoryFeb 08, 2007 - 6:28 p.m.

CVE-2007-0846

2007-02-0818:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2007

0846

cross-site scripting

xss

vulnerability

open tibia server cms

otscms

6 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.6%

JSON

Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter.

CPENameOperatorVersion
open_tibia_server_cms:open_tibia_server_cmsopen tibia server cmseq2.1.3
open_tibia_server_cms:open_tibia_server_cmsopen tibia server cmseq2.1.5
open_tibia_server_cms:open_tibia_server_cmsopen tibia server cmseq2.0
open_tibia_server_cms:open_tibia_server_cmsopen tibia server cmseq2.1.4

CPE	Name	Operator	Version
open_tibia_server_cms:open_tibia_server_cms	open tibia server cms	eq	2.1.3
open_tibia_server_cms:open_tibia_server_cms	open tibia server cms	eq	2.1.5
open_tibia_server_cms:open_tibia_server_cms	open tibia server cms	eq	2.0
open_tibia_server_cms:open_tibia_server_cms	open tibia server cms	eq	2.1.4

References

osvdb.org/33170

secunia.com/advisories/24116

www.securityfocus.com/bid/22450

exchange.xforce.ibmcloud.com/vulnerabilities/32324

www.exploit-db.com/exploits/3283

6 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.6%

JSON

Related for CVE-2007-0846

prion1 securityvulns1