Lucene search
HistoryMay 09, 2007 - 5:19 p.m.
CVE-2007-0605
cve
2007
0605
cross-site scripting
xss
advanced guestbook 2.4.2
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.4%
Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter.
Affected configurations
Node
advanced_guestbookadvanced_guestbookMatch2.4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| advanced_guestbook:advanced_guestbook | advanced guestbook | eq | 2.4.2 |
References
Related
nvd
nvd
CVE-2007-0605
2007-05-09 17:19:00
packetstorm
packetstorm
ag-xss.txt
2007-05-08 00:00:00
prion
prion
Cross site scripting
2007-05-09 17:19:00
cvelist
cvelist
CVE-2007-0605
2007-05-09 17:00:00
securityvulns
securityvulns
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.4%
Related for CVE-2007-0605