Lucene search

MitreCVE-2007-3269

HistoryJun 19, 2007 - 9:30 p.m.

CVE-2007-3269

2007-06-1921:30:00

mitre

web.nvd.nist.gov

security

xss

papoo light 3.6

cve-2007-3269

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.017

Percentile

87.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in a GET request or (2) the Title field of a visitor comment, and (3) allow remote authenticated users to inject arbitrary web script or HTML via a message to another user. NOTE: vector (2) might overlap CVE-2006-3571.1.

Affected configurations

Nvd

Node

papoopapoo_cms_lightRange≤3.6

VendorProductVersionCPE
papoopapoo_cms_light*cpe:2.3:a:papoo:papoo_cms_light:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
papoo	papoo_cms_light	*	cpe:2.3:a:papoo:papoo_cms_light::::::::

References

osvdb.org/37544

osvdb.org/37545

osvdb.org/37546

secunia.com/advisories/25708

securityreason.com/securityalert/2825

www.papoo.de/index/menuid/204/reporeid/215

www.securityfocus.com/archive/1/471490/100/0/threaded

www.securityfocus.com/bid/24494

exchange.xforce.ibmcloud.com/vulnerabilities/34888

Social References

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.017

Percentile

87.9%

JSON

Related for CVE-2007-3269