Lucene search
HistoryJun 28, 2007 - 8:30 p.m.
CVE-2007-3485
cve
2007
3485
xss
yandex.server
web script
html
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.6%
Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) within parameter to the default URI.
Affected configurations
Node
yandexyandex.server
| CPE | Name | Operator | Version |
|---|---|---|---|
| yandex:yandex.server | yandex yandex.server | eq | * |
Related
cvelist
cvelist
CVE-2007-3485
2007-06-28 20:00:00
packetstorm
packetstorm
Yandex.Server 2010 9.0 Enterprise Cross Site Scripting
2012-05-22 00:00:00
nvd
nvd
CVE-2007-3485
2007-06-28 20:30:00
prion
prion
Cross site scripting
2007-06-28 20:30:00
securityvulns
securityvulns
Новая XSS уязвимость в Yandex.Server
2012-06-03 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.6%
Related for CVE-2007-3485