CVE-2007-2335

Cross-site scripting (XSS) vulnerability in the RSS feed reader functionality in Lunascape 4.1.3 build2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Link	Resource
http://jvn.jp/jp/JVN%2336628264/index.html
http://lunapedia.lunascape.jp/index.php?title=Lunascape_4#2007.2F04.2F25_ver_4.2.0
http://www.securityfocus.com/bid/23665
http://secunia.com/advisories/25000	Patch Vendor Advisory
http://osvdb.org/35364
http://www.vupen.com/english/advisories/2007/1538
https://exchange.xforce.ibmcloud.com/vulnerabilities/34074

Configuration 1

cpe:2.3:a:lunascape:lunascape:4.1.3:*:*:*:*:*:*:* cpe:2.3:a:lunascape:lunascape:4.1.2:*:*:*:*:*:*:* cpe:2.3:a:lunascape:lunascape:4.1.1:*:*:*:*:*:*:* cpe:2.3:a:lunascape:lunascape:4.1:*:*:*:*:*:*:*

---

Published : 2007-04-27 04:19

Updated : 2017-07-29 01:31

---

NVD link : CVE-2007-2335

Mitre link : CVE-2007-2335

No products.

NVD-CWE-Other