ID CVE-2007-3241
Summary Cross-site scripting (XSS) vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI.
References
Vulnerable Configurations
  • cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 16-10-2018 - 16:47)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bugtraq 20070608 Wordpress default theme XSS (admin) and other problems
misc http://www.xssnews.com/
osvdb 36817
sreason 2807
Last major update 16-10-2018 - 16:47
Published 15-06-2007 - 01:30
Last modified 16-10-2018 - 16:47
Back to Top