Lucene search

MitreCVE-2007-6142

HistoryNov 27, 2007 - 7:46 p.m.

CVE-2007-6142

2007-11-2719:46:00

CWE-79

mitre

web.nvd.nist.gov

cve-2007-6142

cross-site scripting

xss

jaf cms 4.0 rc2

security vulnerabilities

web script injection

html injection

remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) show parameter to index.php and the (2) print parameter to print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

salims_softhousejaf_cmsMatch4.0_rc2

VendorProductVersionCPE
salims_softhousejaf_cms4.0_rc2cpe:2.3:a:salims_softhouse:jaf_cms:4.0_rc2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
salims_softhouse	jaf_cms	4.0_rc2	cpe:2.3:a:salims_softhouse:jaf_cms:4.0_rc2:::::::*

References

secunia.com/advisories/27807

www.securityfocus.com/bid/26581

exchange.xforce.ibmcloud.com/vulnerabilities/38637

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Related for CVE-2007-6142