Lucene search
HistoryJun 19, 2007 - 9:30 p.m.
CVE-2007-3276
cve-2007-3276
xss
index.php
site@school
s@s
remote attackers
web script
html
q parameter
nvd
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
64.3%
Cross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| siteatschool:siteatschool | siteatschool | eq | 2.4.10 |
Related
prion
prion
Cross site scripting
2007-06-19 21:30:00
cvelist
cvelist
CVE-2007-3276
2007-06-19 21:00:00
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
64.3%
Related for CVE-2007-3276