Lucene search

[email protected]CVE-2007-0891

HistoryFeb 12, 2007 - 11:28 p.m.

CVE-2007-0891

2007-02-1223:28:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2007-0891

cross-site scripting

xss

getcurrentcompletepath

phpmyvisites

security vulnerability

nvd

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON

Cross-site scripting (XSS) vulnerability in the GetCurrentCompletePath function in phpmyvisites.php in phpMyVisites before 2.2 allows remote attackers to inject arbitrary web script or HTML via the query string.

CPENameOperatorVersion
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.2.2
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.0
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.3
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.2_beta
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq0.1_beta
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.2.1
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.1
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisiteseq1.2
matthieu_aubry:phpmyvisitesmatthieu aubry phpmyvisitesle2.1

CPE	Name	Operator	Version
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.2.2
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.0
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.3
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.2_beta
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	0.1_beta
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.2.1
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.1
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	eq	1.2
matthieu_aubry:phpmyvisites	matthieu aubry phpmyvisites	le	2.1

References

marc.info/?l=full-disclosure&m=117121596803908&w=2

osvdb.org/33176

secunia.com/advisories/24124

www.securityfocus.com/archive/1/459792/100/0/threaded

www.securityfocus.com/bid/22516

www.vupen.com/english/advisories/2007/0566

exchange.xforce.ibmcloud.com/vulnerabilities/32430

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON

Related for CVE-2007-0891

prion1 securityvulns1