| ID |
CVE-2007-3963
|
| Summary |
Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php, (2) upgrade-0-3.php, or (3) upgrade-0-4.php in install/, a different vulnerability than CVE-2005-4193. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:usebb:usebb:1.0:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.1:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.2:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.3:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.4:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.5:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.6:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0.7:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0_rc1:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0_rc1:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0_rc2:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0_rc2:*:*:*:*:*:*:*
-
cpe:2.3:a:usebb:usebb:1.0_rc3:*:*:*:*:*:*:*
cpe:2.3:a:usebb:usebb:1.0_rc3:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 9.3 (as of 15-10-2018 - 21:32) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
| refmap
via4
|
| bid | 24990 | | bugtraq | 20070720 UseBB 1.0.x Cross Site Scripting (XSS) | | sreason | 2915 |
|
| Last major update |
15-10-2018 - 21:32 |
| Published |
25-07-2007 - 17:30 |
| Last modified |
15-10-2018 - 21:32 |
