CVE Vulnerability

CVE-2007-5426

Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://securityvulns.ru/Rdocument956.html Exploit
http://www.securityfocus.com/bid/26027
http://secunia.com/advisories/27194
http://securityreason.com/securityalert/3216
http://osvdb.org/37661
https://exchange.xforce.ibmcloud.com/vulnerabilities/37066
http://www.securityfocus.com/archive/1/482006/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:interspire:activekb_nx:2.5.4:*:*:*:*:*:*:*
Information

Published : 2007-10-12 11:17

Updated : 2018-10-15 09:44

NVD link : CVE-2007-5426

Mitre link : CVE-2007-5426

Products Affected
No products.
CWE
CWE-79