{"bulletinFamily": "software", "viewCount": 0, "reporter": "OSVDB", "references": [], "description": "## Manual Testing Notes\nhttp://[target]/[path]/htdocs/php.php?page[]=<script>alert(/the_Edit0r/);</script>\n## References:\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-04/0218.html\nISS X-Force ID: 33685\n[CVE-2007-2099](https://vulners.com/cve/CVE-2007-2099)\n", "affectedSoftware": [], "href": "https://vulners.com/osvdb/OSVDB:34143", "modified": "2007-04-14T15:16:01", "enchantments": {"score": {"value": 5.7, "vector": "NONE", "modified": "2017-04-28T13:20:30", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-2099"]}], "modified": "2017-04-28T13:20:30", "rev": 2}, "vulnersScore": 5.7}, "id": "OSVDB:34143", "title": "Back-End CMS htdocs/php.php page[] Variable XSS", "edition": 1, "published": "2007-04-14T15:16:01", "type": "osvdb", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "cvelist": ["CVE-2007-2099"], "lastseen": "2017-04-28T13:20:30", "immutableFields": []}

{"cve": [{"lastseen": "2021-02-02T05:31:23", "description": "Cross-site scripting (XSS) vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web script or HTML via the page[] parameter.", "edition": 4, "cvss3": {}, "published": "2007-04-18T10:19:00", "title": "CVE-2007-2099", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": true, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2099"], "modified": "2018-10-16T16:41:00", "cpe": ["cpe:/a:openconcept:back-end_cms:0.4.7"], "id": "CVE-2007-2099", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2099", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openconcept:back-end_cms:0.4.7:*:*:*:*:*:*:*"]}]}