Lucene search

[email protected]CVE-2007-3963

HistoryJul 25, 2007 - 5:30 p.m.

CVE-2007-3963

2007-07-2517:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-3963

xss

usebb

php

web script

html

vulnerability

remote attackers

5.9 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php, (2) upgrade-0-3.php, or (3) upgrade-0-4.php in install/, a different vulnerability than CVE-2005-4193.

CPENameOperatorVersion
usebb:usebbusebbeq1.0.7
usebb:usebbusebbeq1.0.5
usebb:usebbusebbeq1.0_rc3
usebb:usebbusebbeq1.0_rc1
usebb:usebbusebbeq1.0.4
usebb:usebbusebbeq1.0.6
usebb:usebbusebbeq1.0_rc2
usebb:usebbusebbeq1.0.1
usebb:usebbusebbeq1.0.2
usebb:usebbusebbeq1.0

CPE	Name	Operator	Version
usebb:usebb	usebb	eq	1.0.7
usebb:usebb	usebb	eq	1.0.5
usebb:usebb	usebb	eq	1.0_rc3
usebb:usebb	usebb	eq	1.0_rc1
usebb:usebb	usebb	eq	1.0.4
usebb:usebb	usebb	eq	1.0.6
usebb:usebb	usebb	eq	1.0_rc2
usebb:usebb	usebb	eq	1.0.1
usebb:usebb	usebb	eq	1.0.2
usebb:usebb	usebb	eq	1.0

Rows per page:

1-10 of 111

References

securityreason.com/securityalert/2915

www.securityfocus.com/archive/1/474256/100/0/threaded

www.securityfocus.com/bid/24990

5.9 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for CVE-2007-3963

prion1 cve1