CVE-2007-4146 - Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote

CVE-2007-4146

Summary

Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

Vulnerable Configurations

cpe:2.3:a:webevents:webevents:2.7:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.7:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.61:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.61:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.71:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.71:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.72:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:2.72:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:4.03:*:*:*:*:*:*:*
cpe:2.3:a:webevents:webevents:4.03:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 15-09-2009 - 05:05)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	25148
misc	http://downloads.securityfocus.com/vulnerabilities/exploits/25148.html
osvdb	40156
secunia	28389

Last major update

15-09-2009 - 05:05

Published

03-08-2007 - 20:17

Last modified

15-09-2009 - 05:05