CVE-2007-0891

Опубликовано: 12 фев. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the GetCurrentCompletePath function in phpmyvisites.php in phpMyVisites before 2.2 allows remote attackers to inject arbitrary web script or HTML via the query string.

Ссылки

http://marc.info/?l=full-disclosure&m=117121596803908&w=2
Third Party Advisory
http://osvdb.org/33176
Broken Link
http://secunia.com/advisories/24124
Permissions Required
http://www.securityfocus.com/archive/1/459792/100/0/threaded
http://www.securityfocus.com/bid/22516
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/0566
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/32430
http://marc.info/?l=full-disclosure&m=117121596803908&w=2
Third Party Advisory
http://osvdb.org/33176
Broken Link
http://secunia.com/advisories/24124
Permissions Required
http://www.securityfocus.com/archive/1/459792/100/0/threaded
http://www.securityfocus.com/bid/22516
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/0566
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/32430

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:matthieu_aubry:phpmyvisites:*:*:*:*:*:*:*:*

Версия до 2.1 (включая)

cpe:2.3:a:matthieu_aubry:phpmyvisites:0.1_beta:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.0:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.1:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2_beta:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.01395

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-x7qj-265q-3vvw

github

больше 4 лет назад