Lucene search

PRIOn knowledge basePRION:CVE-2007-5950

HistoryNov 14, 2007 - 1:46 a.m.

Cross site scripting

2007-11-1401:46:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

JSON

Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before 1.1.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-4165.

CPENameOperatorVersion
netcommonsle1.0.10
netcommonsle1.1.1

CPE	Name	Operator	Version
	netcommons	le	1.0.10
	netcommons	le	1.1.1

References

jvn.jp/jp/JVN%2379295963/index.html

secunia.com/advisories/27484

www.netcommons.org/modules/journal/journal_detail.php?block_id=2121&news_id=316&op=comment

www.securityfocus.com/bid/26328

www.vupen.com/english/advisories/2007/3717

exchange.xforce.ibmcloud.com/vulnerabilities/38257

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

JSON

Related for PRION:CVE-2007-5950

cve2