Lucene search

PRIOn knowledge basePRION:CVE-2007-2085

HistoryApr 18, 2007 - 10:19 a.m.

Cross site scripting

2007-04-1810:19:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON

Cross-site scripting (XSS) vulnerability in oe2edit.cgi in oe2edit CMS allows remote attackers to inject arbitrary web script or HTML via the q parameter.

References

osvdb.org/34972

secunia.com/advisories/24919

www.majorsecurity.de/index_2.php?major_rls=major_rls45

www.securityfocus.com/archive/1/465844/100/0/threaded

www.securityfocus.com/bid/23512

www.vupen.com/english/advisories/2007/1417

exchange.xforce.ibmcloud.com/vulnerabilities/33690

6.1 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON

Related for PRION:CVE-2007-2085

cve1