Search...

Ripe Website Manager admin/navigation/do_new_nav.php new_menuname Variable XSS

2007-08-22T00:00:00

ID OSVDB:38448
Type osvdb
Reporter OSVDB
Modified 2007-08-22T00:00:00

Description

No description provided by the source

References:

Related OSVDB ID: 38444 Related OSVDB ID: 38445 Related OSVDB ID: 38449 Related OSVDB ID: 38446 Related OSVDB ID: 38447 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html ISS X-Force ID: 36179 CVE-2007-4523 Bugtraq ID: 25406

JSON Vulners Source

Initial Source

{"bulletinFamily": "software", "viewCount": 0, "reporter": "OSVDB", "references": [], "description": "# No description provided by the source\n\n## References:\n[Related OSVDB ID: 38444](https://vulners.com/osvdb/OSVDB:38444)\n[Related OSVDB ID: 38445](https://vulners.com/osvdb/OSVDB:38445)\n[Related OSVDB ID: 38449](https://vulners.com/osvdb/OSVDB:38449)\n[Related OSVDB ID: 38446](https://vulners.com/osvdb/OSVDB:38446)\n[Related OSVDB ID: 38447](https://vulners.com/osvdb/OSVDB:38447)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html\nISS X-Force ID: 36179\n[CVE-2007-4523](https://vulners.com/cve/CVE-2007-4523)\nBugtraq ID: 25406\n", "affectedSoftware": [], "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "b99f23932d331337d90c120d16b3c8df"}, {"key": "cvss", "hash": "d16a1892885a4cedfc7b1d4344ffb50d"}, {"key": "description", "hash": "ccdfa1fafbc74c16a3129ec8c90e3755"}, {"key": "href", "hash": "dd3ef6b7c1b2d208138c7d84e8dddf82"}, {"key": "modified", "hash": "12aac12e40226d5de4d50e54e436e14f"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "12aac12e40226d5de4d50e54e436e14f"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "955b328dc7cd615c13af5464c9183464"}, {"key": "title", "hash": "ad5bdfd76dc779f8120038392d404809"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "href": "https://vulners.com/osvdb/OSVDB:38448", "modified": "2007-08-22T00:00:00", "objectVersion": "1.2", "enchantments": {"score": {"value": 5.2, "vector": "NONE", "modified": "2017-04-28T13:20:34"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-4523"]}, {"type": "osvdb", "idList": ["OSVDB:38449", "OSVDB:38447", "OSVDB:38444", "OSVDB:38446", "OSVDB:38445"]}], "modified": "2017-04-28T13:20:34"}, "vulnersScore": 5.2}, "id": "OSVDB:38448", "title": "Ripe Website Manager admin/navigation/do_new_nav.php new_menuname Variable XSS", "hash": "80854e96a5664d36b66c37130c35612db327c15c3b06af376b13c8cac9514c85", "edition": 1, "published": "2007-08-22T00:00:00", "type": "osvdb", "history": [], "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}, "cvelist": ["CVE-2007-4523"], "lastseen": "2017-04-28T13:20:34"}

{"cve": [{"lastseen": "2019-05-29T18:09:01", "bulletinFamily": "NVD", "description": "Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php, probably involving the Title or textarea field as reachable through admin/pages/new_page.php. NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.", "modified": "2018-10-15T21:35:00", "id": "CVE-2007-4523", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-4523", "published": "2007-08-25T00:17:00", "title": "CVE-2007-4523", "type": "cve", "cvss": {"score": 3.5, "vector": "AV:N/AC:M/Au:S/C:N/I:P/A:N"}}], "osvdb": [{"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\n[Related OSVDB ID: 38444](https://vulners.com/osvdb/OSVDB:38444)\n[Related OSVDB ID: 38445](https://vulners.com/osvdb/OSVDB:38445)\n[Related OSVDB ID: 38449](https://vulners.com/osvdb/OSVDB:38449)\n[Related OSVDB ID: 38447](https://vulners.com/osvdb/OSVDB:38447)\n[Related OSVDB ID: 38448](https://vulners.com/osvdb/OSVDB:38448)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html\nISS X-Force ID: 36179\n[CVE-2007-4523](https://vulners.com/cve/CVE-2007-4523)\nBugtraq ID: 25406\n", "modified": "2007-08-22T00:00:00", "published": "2007-08-22T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38446", "id": "OSVDB:38446", "title": "Ripe Website Manager navigation/delete_item.php id Variable XSS", "type": "osvdb", "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\n[Related OSVDB ID: 38444](https://vulners.com/osvdb/OSVDB:38444)\n[Related OSVDB ID: 38445](https://vulners.com/osvdb/OSVDB:38445)\n[Related OSVDB ID: 38449](https://vulners.com/osvdb/OSVDB:38449)\n[Related OSVDB ID: 38446](https://vulners.com/osvdb/OSVDB:38446)\n[Related OSVDB ID: 38448](https://vulners.com/osvdb/OSVDB:38448)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html\nISS X-Force ID: 36179\n[CVE-2007-4523](https://vulners.com/cve/CVE-2007-4523)\nBugtraq ID: 25406\n", "modified": "2007-08-22T00:00:00", "published": "2007-08-22T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38447", "id": "OSVDB:38447", "title": "Ripe Website Manager admin/navigation/do_new_item.php Multiple Variable XSS", "type": "osvdb", "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\n[Related OSVDB ID: 38444](https://vulners.com/osvdb/OSVDB:38444)\n[Related OSVDB ID: 38445](https://vulners.com/osvdb/OSVDB:38445)\n[Related OSVDB ID: 38446](https://vulners.com/osvdb/OSVDB:38446)\n[Related OSVDB ID: 38447](https://vulners.com/osvdb/OSVDB:38447)\n[Related OSVDB ID: 38448](https://vulners.com/osvdb/OSVDB:38448)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html\nISS X-Force ID: 36179\n[CVE-2007-4523](https://vulners.com/cve/CVE-2007-4523)\nBugtraq ID: 25406\n", "modified": "2007-08-22T00:00:00", "published": "2007-08-22T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38449", "id": "OSVDB:38449", "title": "Ripe Website Manager admin/pages/do_new_page.php Multiple Variable XSS", "type": "osvdb", "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\n[Related OSVDB ID: 38445](https://vulners.com/osvdb/OSVDB:38445)\n[Related OSVDB ID: 38449](https://vulners.com/osvdb/OSVDB:38449)\n[Related OSVDB ID: 38446](https://vulners.com/osvdb/OSVDB:38446)\n[Related OSVDB ID: 38447](https://vulners.com/osvdb/OSVDB:38447)\n[Related OSVDB ID: 38448](https://vulners.com/osvdb/OSVDB:38448)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html\nISS X-Force ID: 36179\n[CVE-2007-4523](https://vulners.com/cve/CVE-2007-4523)\nBugtraq ID: 25406\n", "modified": "2007-08-22T00:00:00", "published": "2007-08-22T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38444", "id": "OSVDB:38444", "title": "Ripe Website Manager pages/delete_page.php id Variable XSS", "type": "osvdb", "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\n[Related OSVDB ID: 38444](https://vulners.com/osvdb/OSVDB:38444)\n[Related OSVDB ID: 38449](https://vulners.com/osvdb/OSVDB:38449)\n[Related OSVDB ID: 38446](https://vulners.com/osvdb/OSVDB:38446)\n[Related OSVDB ID: 38447](https://vulners.com/osvdb/OSVDB:38447)\n[Related OSVDB ID: 38448](https://vulners.com/osvdb/OSVDB:38448)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0357.html\nISS X-Force ID: 36179\n[CVE-2007-4523](https://vulners.com/cve/CVE-2007-4523)\nBugtraq ID: 25406\n", "modified": "2007-08-22T00:00:00", "published": "2007-08-22T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38445", "id": "OSVDB:38445", "title": "Ripe Website Manager navigation/delete_menu.php id Variable XSS", "type": "osvdb", "cvss": {"score": 3.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:PARTIAL/A:NONE/"}}]}