CVE Vulnerability

CVE-2007-3708

Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xss_clean function.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html
http://secunia.com/advisories/25991
http://securityreason.com/securityalert/2877
http://osvdb.org/37907
https://exchange.xforce.ibmcloud.com/vulnerabilities/35350
http://www.securityfocus.com/archive/1/473190/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:codeigniter:codeigniter:1.5.3:*:*:*:*:*:*:*
Information

Published : 2007-07-11 11:30

Updated : 2018-10-15 09:29

NVD link : CVE-2007-3708

Mitre link : CVE-2007-3708

Products Affected
No products.
CWE
NVD-CWE-Other