Lucene search

[email protected]CVE-2007-2153

HistoryApr 19, 2007 - 10:19 a.m.

CVE-2007-2153

2007-04-1910:19:00

[email protected]

web.nvd.nist.gov

cve

2007

2153

cross-site scripting

xss

atmail 5.0

remote attackers

web script

html

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.5%

JSON

Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Affected configurations

NVD

Node

atmailatmail_webmailRange≤5.0

CPENameOperatorVersion
atmail:atmail_webmailatmail atmail webmaille5.0

CPE	Name	Operator	Version
atmail:atmail_webmail	atmail atmail webmail	le	5.0

References

securityreason.com/securityalert/2594

www.majorsecurity.de/index_2.php?major_rls=major_rls43

www.securityfocus.com/archive/1/465378/100/100/threaded

www.securityfocus.com/bid/23428

exchange.xforce.ibmcloud.com/vulnerabilities/33591

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.5%

JSON

Related for CVE-2007-2153

prion1 nvd1 cvelist1