Lucene search

K
cveMitreCVE-2007-6001
HistoryNov 15, 2007 - 10:46 p.m.

CVE-2007-6001

2007-11-1522:46:00
CWE-79
mitre
web.nvd.nist.gov
27
xss
bandersnatch
vulnerability
cve-2007-6001
web script
html
remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

77.7%

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) func or (2) date parameter, or the jid parameter in a (3) log or (4) user action, a different vulnerability than CVE-2007-3910.

Affected configurations

Nvd
Node
bandersnatchbandersnatchMatch0.4
VendorProductVersionCPE
bandersnatchbandersnatch0.4cpe:2.3:a:bandersnatch:bandersnatch:0.4:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

77.7%