Lucene search

MitreCVE-2007-4479

HistoryAug 22, 2007 - 11:17 p.m.

CVE-2007-4479

2007-08-2223:17:00

mitre

web.nvd.nist.gov

cve

2007

4479

cross-site scripting

xss

search engine builder

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.011

Percentile

84.3%

JSON

Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter.

Affected configurations

Nvd

Node

aleadsoft.comsearch_engine_builder_professionalMatch2.40

VendorProductVersionCPE
aleadsoft.comsearch_engine_builder_professional2.40cpe:2.3:a:aleadsoft.com:search_engine_builder_professional:2.40:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
aleadsoft.com	search_engine_builder_professional	2.40	cpe:2.3:a:aleadsoft.com:search_engine_builder_professional:2.40:::::::*

References

osvdb.org/37097

secunia.com/advisories/26560

securityvulns.ru/Rdocument843.html

websecurity.com.ua/1159/

www.securityfocus.com/archive/1/477253/100/0/threaded

www.securityfocus.com/bid/25391

exchange.xforce.ibmcloud.com/vulnerabilities/36149

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.011

Percentile

84.3%

JSON

Related for CVE-2007-4479