Lucene search

[email protected]CVE-2007-3887

HistoryJul 18, 2007 - 11:30 p.m.

CVE-2007-3887

2007-07-1823:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2007-3887

cross-site scripting

xss

mesaj_formu.asp

asp ziyaretci defteri 1.1

web script injection

html injection

remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Isim, (2) Mesajiniz, and (3) E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php.

Affected configurations

NVD

Node

asp_ziyaretci_defteriasp_ziyaretci_defteriMatch1.1

CPENameOperatorVersion
asp_ziyaretci_defteri:asp_ziyaretci_defteriasp ziyaretci defterieq1.1

CPE	Name	Operator	Version
asp_ziyaretci_defteri:asp_ziyaretci_defteri	asp ziyaretci defteri	eq	1.1

References

secunia.com/advisories/26079

secunia.com/advisories/26375

www.packetstormsecurity.org/0707-exploits/aspziy-xss.txt

www.securityfocus.com/bid/24937

www.vupen.com/english/advisories/2007/2558

exchange.xforce.ibmcloud.com/vulnerabilities/35445

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%

JSON

Related for CVE-2007-3887

prion1 cvelist1 nvd1