Lucene search

[email protected]CVE-2007-4239

HistoryAug 08, 2007 - 10:17 p.m.

CVE-2007-4239

2007-08-0822:17:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2007

4239

xss

vulnerability

c-sam

onewallet

admin interface

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.8%

JSON

Cross-site scripting (XSS) vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 210_07062007;1.0 allows remote attackers to inject arbitrary web script or HTML via the loginID parameter.

CPENameOperatorVersion
c-sam:onewalletc-sam onewalleteq210_07062007_1.0

CPE	Name	Operator	Version
c-sam:onewallet	c-sam onewallet	eq	210_07062007_1.0

References

www.securityfocus.com/archive/1/475732/100/0/threaded

www.securityfocus.com/bid/25224

exchange.xforce.ibmcloud.com/vulnerabilities/35838

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.8%

JSON

Related for CVE-2007-4239

prion1