CVE-2007-0390 - Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to in

CVE-2007-0390

Summary

Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web script or HTML via the tag parameter.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051868.html
http://osvdb.org/31602
http://secunia.com/advisories/23824
http://securityreason.com/securityalert/2170
http://www.securityfocus.com/archive/1/457331/100/0/threaded
http://www.securityfocus.com/bid/22115
https://exchange.xforce.ibmcloud.com/vulnerabilities/31600

Vulnerable Configurations

cpe:2.3:a:sabros.us:sabros.us:1.7:*:*:*:*:*:*:*
cpe:2.3:a:sabros.us:sabros.us:1.7:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 16-10-2018 - 16:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	22115
bugtraq	20070118 [x0n3-h4ck] sabros.us 1.7 XSS Exploit
fulldisc	20070118 [x0n3-h4ck] sabros.us 1.7 XSS Exploit
osvdb	31602
secunia	23824
sreason	2170
xf	sabros-index-xss(31600)

Last major update

16-10-2018 - 16:32

Published

19-01-2007 - 23:28

Last modified

16-10-2018 - 16:32