CVE-2007-0846

2007-02-0818:28:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.029

Percentile

90.8%

JSON

Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter.

Affected configurations

Nvd

Node

open_tibia_server_cmsopen_tibia_server_cmsMatch2.0

open_tibia_server_cmsopen_tibia_server_cmsMatch2.1.3

open_tibia_server_cmsopen_tibia_server_cmsMatch2.1.4

open_tibia_server_cmsopen_tibia_server_cmsMatch2.1.5

VendorProductVersionCPE
open_tibia_server_cmsopen_tibia_server_cms2.0cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.0:*:*:*:*:*:*:*
open_tibia_server_cmsopen_tibia_server_cms2.1.3cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.1.3:*:*:*:*:*:*:*
open_tibia_server_cmsopen_tibia_server_cms2.1.4cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.1.4:*:*:*:*:*:*:*
open_tibia_server_cmsopen_tibia_server_cms2.1.5cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.1.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
open_tibia_server_cms	open_tibia_server_cms	2.0	cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.0:::::::*
open_tibia_server_cms	open_tibia_server_cms	2.1.3	cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.1.3:::::::*
open_tibia_server_cms	open_tibia_server_cms	2.1.4	cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.1.4:::::::*
open_tibia_server_cms	open_tibia_server_cms	2.1.5	cpe:2.3:a:open_tibia_server_cms:open_tibia_server_cms:2.1.5:::::::*