Lucene search

K

[email protected]NVD:CVE-2007-5683

HistoryOct 26, 2007 - 6:46 p.m.

CVE-2007-5683

2007-10-2618:46:00

CWE-79

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.7%

Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remind_password.php), (2) IMG tags in wiki pages, and (3) the local_php parameter to db/tiki-db.php.

Affected configurations

NVD

Node

tikitikiwiki_cms\/groupwareRange≤1.9.8.1

OR

tikitikiwiki_cms\/groupwareMatch1.6.1

OR

tikitikiwiki_cms\/groupwareMatch1.9.0

OR

tikitikiwiki_cms\/groupwareMatch1.9.0rc1

OR

tikitikiwiki_cms\/groupwareMatch1.9.0rc2

OR

tikitikiwiki_cms\/groupwareMatch1.9.0rc3

OR

tikitikiwiki_cms\/groupwareMatch1.9.1

OR

tikitikiwiki_cms\/groupwareMatch1.9.2

OR

tikitikiwiki_cms\/groupwareMatch1.9.3

OR

tikitikiwiki_cms\/groupwareMatch1.9.4

OR

tikitikiwiki_cms\/groupwareMatch1.9.5

OR

tikitikiwiki_cms\/groupwareMatch1.9.6

OR

tikitikiwiki_cms\/groupwareMatch1.9.7

OR

tikitikiwiki_cms\/groupwareMatch1.9.8

References

info.tikiwiki.org/tiki-read_article.php?articleId=15

www.securityfocus.com/archive/1/482801/30/0/threaded

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.7%

Related for NVD:CVE-2007-5683

cve1 ubuntucve1 prion1 cvelist1 nessus1 openvas2 freebsd1