Lucene search

[email protected]CVE-2007-4479

HistoryAug 22, 2007 - 11:17 p.m.

CVE-2007-4479

2007-08-2223:17:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2007

4479

cross-site scripting

xss

search engine builder

vulnerability

nvd

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

79.2%

JSON

Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter.

CPENameOperatorVersion
aleadsoft.com:search_engine_builder_professionalaleadsoft.com search engine builder professionaleq2.40

CPE	Name	Operator	Version
aleadsoft.com:search_engine_builder_professional	aleadsoft.com search engine builder professional	eq	2.40

References

osvdb.org/37097

secunia.com/advisories/26560

securityvulns.ru/Rdocument843.html

websecurity.com.ua/1159/

www.securityfocus.com/archive/1/477253/100/0/threaded

www.securityfocus.com/bid/25391

exchange.xforce.ibmcloud.com/vulnerabilities/36149

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

79.2%

JSON

Related for CVE-2007-4479

prion1 cvelist1 securityvulns1