CVE-2007-4713

Sažetak

Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters.

Reference

http://osvdb.org/36807
http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html
http://secunia.com/advisories/26682
http://www.securityfocus.com/bid/25530
http://www.vupen.com/english/advisories/2007/3085
https://exchange.xforce.ibmcloud.com/vulnerabilities/36401

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

29-07-2017 - 01:33

Objavljeno

05-09-2007 - 19:17