Lucene search

MitreCVE-2007-3134

HistoryJun 08, 2007 - 4:30 p.m.

CVE-2007-3134

2007-06-0816:30:00

mitre

web.nvd.nist.gov

cve-2007-3134

cross-site scripting

xss

atom photoblog

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name, (2) Your Homepage, and (3) Your Comment fields, when using “Approve Comments.”

Affected configurations

Nvd

Node

atomphotoblogRange≤1.0.9

VendorProductVersionCPE
atomphotoblog*cpe:2.3:a:atom:photoblog:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
atom	photoblog	*	cpe:2.3:a:atom:photoblog::::::::

References

osvdb.org/37046

secunia.com/advisories/25562

sourceforge.net/project/shownotes.php?group_id=186464&release_id=514101

exchange.xforce.ibmcloud.com/vulnerabilities/34767

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Related for CVE-2007-3134