Lucene search

[email protected]CVE-2007-4064

HistoryJul 30, 2007 - 5:30 p.m.

CVE-2007-4064

2007-07-3017:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2007

4064

xss

vulnerabilities

drupal

remote attackers

web script

html

nvd

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote attackers to inject arbitrary web script or HTML via “some server variables,” including PHP_SELF; and (2) allow remote authenticated administrators to inject arbitrary web script or HTML via custom content type names.

CPENameOperatorVersion
drupal:drupaldrupaleq4.7.2
drupal:drupaldrupaleq4.7.5
drupal:drupaldrupaleq4.7.3
drupal:drupaldrupaleq5.0
drupal:drupaldrupaleq4.7.0
drupal:drupaldrupaleq4.7_rev1.15
drupal:drupaldrupaleq4.7
drupal:drupaldrupaleq4.7.6
drupal:drupaldrupaleq5.1
drupal:drupaldrupaleq4.7.4

CPE	Name	Operator	Version
drupal:drupal	drupal	eq	4.7.2
drupal:drupal	drupal	eq	4.7.5
drupal:drupal	drupal	eq	4.7.3
drupal:drupal	drupal	eq	5.0
drupal:drupal	drupal	eq	4.7.0
drupal:drupal	drupal	eq	4.7_rev1.15
drupal:drupal	drupal	eq	4.7
drupal:drupal	drupal	eq	4.7.6
drupal:drupal	drupal	eq	5.1
drupal:drupal	drupal	eq	4.7.4

Rows per page:

1-10 of 111

References

drupal.org/files/sa-2007-018/advisory.txt

secunia.com/advisories/26224

www.securityfocus.com/bid/25097

www.vupen.com/english/advisories/2007/2697

exchange.xforce.ibmcloud.com/vulnerabilities/35637

exchange.xforce.ibmcloud.com/vulnerabilities/35638

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.5%

JSON

Related for CVE-2007-4064

prion1 ubuntucve1 openvas4