CVE Vulnerability

CVE-2007-3973

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.securityfocus.com/bid/24991 Exploit Vendor Advisory
http://secunia.com/advisories/26165
http://securityreason.com/securityalert/2919
http://osvdb.org/38557
http://osvdb.org/38558
http://www.vupen.com/english/advisories/2007/2611
https://exchange.xforce.ibmcloud.com/vulnerabilities/35556
https://exchange.xforce.ibmcloud.com/vulnerabilities/35551
https://www.exploit-db.com/exploits/4211
http://www.securityfocus.com/archive/1/474320/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:jblog:jblog:1.0:*:*:*:*:*:*:*
Information

Published : 2007-07-25 05:30

Updated : 2018-10-15 09:32

NVD link : CVE-2007-3973

Mitre link : CVE-2007-3973

Products Affected
No products.
CWE
NVD-CWE-Other