CVE-2007-4048

2007-07-3000:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.8%

JSON

Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo
2.5.4-dev and earlier allows remote attackers to inject arbitrary web
script or HTML via the PATH_INFO.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchegroupware< 1.2.107-2.dfsg-1.1UNKNOWN
ubuntu8.04noarchegroupware< 1.2.107-2.dfsg-1.1UNKNOWN
ubuntu8.10noarchegroupware< 1.2.107-2.dfsg-1.1UNKNOWN
ubuntu9.04noarchegroupware< 1.2.107-2.dfsg-1.1UNKNOWN
ubuntu9.10noarchegroupware< 1.2.107-2.dfsg-1.1UNKNOWN
ubuntu7.10noarchphpgroupware< 0.9.16.012+dfsg-1UNKNOWN
ubuntu8.04noarchphpgroupware< 0.9.16.012+dfsg-1UNKNOWN
ubuntu8.10noarchphpgroupware< 0.9.16.012+dfsg-1UNKNOWN
ubuntu9.04noarchphpgroupware< 0.9.16.012+dfsg-1UNKNOWN
ubuntu9.10noarchphpgroupware< 0.9.16.012+dfsg-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.10	noarch	egroupware	< 1.2.107-2.dfsg-1.1	UNKNOWN
ubuntu	8.04	noarch	egroupware	< 1.2.107-2.dfsg-1.1	UNKNOWN
ubuntu	8.10	noarch	egroupware	< 1.2.107-2.dfsg-1.1	UNKNOWN
ubuntu	9.04	noarch	egroupware	< 1.2.107-2.dfsg-1.1	UNKNOWN
ubuntu	9.10	noarch	egroupware	< 1.2.107-2.dfsg-1.1	UNKNOWN
ubuntu	7.10	noarch	phpgroupware	< 0.9.16.012+dfsg-1	UNKNOWN
ubuntu	8.04	noarch	phpgroupware	< 0.9.16.012+dfsg-1	UNKNOWN
ubuntu	8.10	noarch	phpgroupware	< 0.9.16.012+dfsg-1	UNKNOWN
ubuntu	9.04	noarch	phpgroupware	< 0.9.16.012+dfsg-1	UNKNOWN
ubuntu	9.10	noarch	phpgroupware	< 0.9.16.012+dfsg-1	UNKNOWN