Lucene search

PRIOn knowledge basePRION:CVE-2007-4064

HistoryJul 30, 2007 - 5:30 p.m.

Cross site scripting

2007-07-3017:30:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

64.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote attackers to inject arbitrary web script or HTML via “some server variables,” including PHP_SELF; and (2) allow remote authenticated administrators to inject arbitrary web script or HTML via custom content type names.

CPENameOperatorVersion
drupaleq4.7.2
drupaleq4.7.5
drupaleq4.7.3
drupaleq5.0
drupaleq4.7.0
drupaleq4.7.0-rev1.15
drupaleq4.7
drupaleq4.7.6
drupaleq5.1
drupaleq4.7.4

Name	Operator	Version
drupal	eq	4.7.2
drupal	eq	4.7.5
drupal	eq	4.7.3
drupal	eq	5.0
drupal	eq	4.7.0
drupal	eq	4.7.0-rev1.15
drupal	eq	4.7
drupal	eq	4.7.6
drupal	eq	5.1
drupal	eq	4.7.4

Rows per page:

1-10 of 111

References

secunia.com/advisories/26224

www.securityfocus.com/bid/25097

www.vupen.com/english/advisories/2007/2697

drupal.org/files/sa-2007-018/advisory.txt

exchange.xforce.ibmcloud.com/vulnerabilities/35637

exchange.xforce.ibmcloud.com/vulnerabilities/35638

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

64.7%

JSON

Related for PRION:CVE-2007-4064