Lucene search
HistoryApr 26, 2007 - 9:19 p.m.
CVE-2007-2310
cve-2007-2310
cross-site scripting
xss
vulnerability
bloofoxcms
security
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.5%
Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the img_url parameter.
Affected configurations
Node
bloofoxcmsbloofoxcmsMatch0.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| bloofoxcms:bloofoxcms | bloofoxcms | eq | 0.2.2 |
Related
nvd
nvd
CVE-2007-2310
2007-04-26 21:19:00
prion
prion
Cross site scripting
2007-04-26 21:19:00
cvelist
cvelist
CVE-2007-2310
2007-04-26 21:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.5%
Related for CVE-2007-2310