Lucene search
MitreCVE-2007-0840HistoryFeb 08, 2007 - 2:28 a.m.
CVE-2007-0840
2007-02-0802:28:00
mitre
web.nvd.nist.gov
33
cve-2007-0840
cross-site scripting
xss
hlstats
web script injection
html injection
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.4
Confidence
High
EPSS
0.009
Percentile
82.7%
Cross-site scripting (XSS) vulnerability in HLstats before 1.35 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the search class. NOTE: it is possible that this issue overlaps CVE-2006-4543.3 or CVE-2006-4454.
Affected configurations
Node
hlstatshlstatsMatch1.34
Related
prion
prion
Cross site scripting
2007-02-08 02:28:00
Cross site scripting
2007-05-24 18:30:00
cvelist
cvelist
nvd
nvd
securityvulns
securityvulns
cve
cve
exploitdb
exploitdb
HLstats 1.34 - 'hlstats.php' Cross-Site Scripting
2006-08-29 00:00:00
openvas
openvas
FreeBSD Ports: hlstats
2008-09-04 00:00:00
FreeBSD Ports: hlstats
2008-09-04 00:00:00
freebsd
freebsd
hlstats -- multiple cross site scripting vulnerabilities
2006-08-29 00:00:00
nessus
nessus
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.4
Confidence
High
EPSS
0.009
Percentile
82.7%
Related for CVE-2007-0840