Lucene search

PRIOn knowledge basePRION:CVE-2007-4165

HistoryAug 07, 2007 - 10:17 a.m.

Cross site scripting

2007-08-0710:17:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.0%

JSON

Cross-site scripting (XSS) vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
blue_memories_themeeq1.5

CPE	Name	Operator	Version
	blue_memories_theme	eq	1.5

References

secunia.com/advisories/26345

www.osvdb.org/36603

www.securityfocus.com/bid/25215

xuyiyang.com/2007/06/22/blue-memories-and-spring-updated/

exchange.xforce.ibmcloud.com/vulnerabilities/35817

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.0%

JSON

Related for PRION:CVE-2007-4165