Lucene search

K
cve[email protected]CVE-2007-1714
HistoryMar 27, 2007 - 9:19 p.m.

CVE-2007-1714

2007-03-2721:19:00
web.nvd.nist.gov
20
cve-2007-1714
cross-site scripting
xss vulnerability
cccounter 2.0
index.php
web script injection

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.9%

Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web script or HTML via dir parameter.

Affected configurations

NVD
Node
cccountercccounterMatch2.0
CPENameOperatorVersion
cccounter:cccountercccountereq2.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.9%

Related for CVE-2007-1714