Lucene search

[email protected]CVE-2007-4146

HistoryAug 03, 2007 - 8:17 p.m.

CVE-2007-4146

2007-08-0320:17:00

[email protected]

web.nvd.nist.gov

cve-2007-4146

cross-site scripting

xss

webevent.cgi

webevent

vulnerability

remote attackers

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

webeventswebeventsMatch2.7

webeventswebeventsMatch2.61

webeventswebeventsMatch2.71

webeventswebeventsMatch2.72

webeventswebeventsMatch4.03

CPENameOperatorVersion
webevents:webeventswebeventseq2.7
webevents:webeventswebeventseq2.61
webevents:webeventswebeventseq2.71
webevents:webeventswebeventseq2.72
webevents:webeventswebeventseq4.03

CPE	Name	Operator	Version
webevents:webevents	webevents	eq	2.7
webevents:webevents	webevents	eq	2.61
webevents:webevents	webevents	eq	2.71
webevents:webevents	webevents	eq	2.72
webevents:webevents	webevents	eq	4.03

References

downloads.securityfocus.com/vulnerabilities/exploits/25148.html

osvdb.org/40156

secunia.com/advisories/28389

www.securityfocus.com/bid/25148

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Related for CVE-2007-4146

nvd1 prion1 cvelist1