Lucene search

[email protected]CVE-2007-3211

HistoryJun 14, 2007 - 7:30 p.m.

CVE-2007-3211

2007-06-1419:30:00

[email protected]

web.nvd.nist.gov

cve-2007-3211

cross-site scripting

xss

404.php

domain technologie control

dtc

nvd

security

vulnerability

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.7%

JSON

Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

domain_technologie_controldomain_technologie_controlMatch0.17

domain_technologie_controldomain_technologie_controlMatch0.20

domain_technologie_controldomain_technologie_controlMatch0.22

domain_technologie_controldomain_technologie_controlMatch0.24.5

domain_technologie_controldomain_technologie_controlMatch0.24.5_r0

domain_technologie_controldomain_technologie_controlMatch0.25

domain_technologie_controldomain_technologie_controlMatch0.25.1

CPENameOperatorVersion
domain_technologie_control:domain_technologie_controldomain technologie controleq0.17
domain_technologie_control:domain_technologie_controldomain technologie controleq0.20
domain_technologie_control:domain_technologie_controldomain technologie controleq0.22
domain_technologie_control:domain_technologie_controldomain technologie controleq0.24.5
domain_technologie_control:domain_technologie_controldomain technologie controleq0.24.5_r0
domain_technologie_control:domain_technologie_controldomain technologie controleq0.25
domain_technologie_control:domain_technologie_controldomain technologie controleq0.25.1

CPE	Name	Operator	Version
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.17
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.20
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.22
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.24.5
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.24.5_r0
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.25
domain_technologie_control:domain_technologie_control	domain technologie control	eq	0.25.1

References

osvdb.org/36382

secunia.com/advisories/25504

www.securityfocus.com/bid/24441

exchange.xforce.ibmcloud.com/vulnerabilities/34832

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.7%

JSON

Related for CVE-2007-3211

prion1 nvd1 cvelist1