CVE Vulnerability

CVE-2007-0583

Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://secunia.com/advisories/23964 Vendor Advisory
http://www.securityfocus.com/bid/22298
http://osvdb.org/32986
http://osvdb.org/32985
https://exchange.xforce.ibmcloud.com/vulnerabilities/31877
Configurations

Configuration 1

cpe:2.3:a:http_commander:http_commander:6.0:*:*:*:*:*:*:*
Information

Published : 2007-01-30 05:28

Updated : 2017-07-29 01:30

NVD link : CVE-2007-0583

Mitre link : CVE-2007-0583

Products Affected
No products.
CWE
NVD-CWE-Other