Lucene search

K
cveMitreCVE-2007-5303
HistoryOct 09, 2007 - 6:17 p.m.

CVE-2007-5303

2007-10-0918:17:00
CWE-79
mitre
web.nvd.nist.gov
30
cve-2007-5303
cross-site scripting
xss
snewscms rus 2.1
vulnerability
web script
html
page_id parameter

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

65.4%

Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter.

Affected configurations

Nvd
Node
snewscmssnewscms_rusMatch2.1
VendorProductVersionCPE
snewscmssnewscms_rus2.1cpe:2.3:a:snewscms:snewscms_rus:2.1:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

65.4%

Related for CVE-2007-5303