Lucene search

[email protected]CVE-2007-2600

HistoryMay 11, 2007 - 10:19 a.m.

CVE-2007-2600

2007-05-1110:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-2600

cross-site scripting

xss

tutorialcms

photoshop tutorials

remote attackers

web script

html

vulnerabilities

6.3 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.042 Low

EPSS

Percentile

92.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to © openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or the (3) search parameter to search.php.

CPENameOperatorVersion
wavelink_media:tutorialcmswavelink media tutorialcmsle1.00

CPE	Name	Operator	Version
wavelink_media:tutorialcms	wavelink media tutorialcms	le	1.00

References

osvdb.org/35892

osvdb.org/35893

osvdb.org/35894

osvdb.org/35895

osvdb.org/35896

osvdb.org/35897

www.securityfocus.com/bid/23905

www.vupen.com/english/advisories/2007/1742

exchange.xforce.ibmcloud.com/vulnerabilities/34215

www.exploit-db.com/exploits/3887

6.3 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.042 Low

EPSS

Percentile

92.1%

JSON

Related for CVE-2007-2600

prion1