Lucene search

K
nvd[email protected]NVD:CVE-2007-1231
HistoryMar 03, 2007 - 7:19 p.m.

CVE-2007-1231

2007-03-0319:19:00
CWE-79
web.nvd.nist.gov
1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

77.2%

Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files.

Affected configurations

Nvd
Node
sqlitemanagersqlitemanagerMatch1.2.0
VendorProductVersionCPE
sqlitemanagersqlitemanager1.2.0cpe:2.3:a:sqlitemanager:sqlitemanager:1.2.0:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

77.2%

Related for NVD:CVE-2007-1231