CVE Vulnerability

CVE-2007-6002

Cross-site scripting (XSS) vulnerability in Fenriru (1) Sleipnir 2.5.17 R2 and earlier and (2) Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://jvn.jp/jp/JVN%2365427327/index.html
http://www.fenrir.co.jp/grani/note.html
http://www.fenrir.co.jp/sleipnir/note.html
http://www.securityfocus.com/bid/26418 Patch
http://secunia.com/advisories/27655 Patch Vendor Advisory
http://secunia.com/advisories/27675 Patch Vendor Advisory
http://osvdb.org/38876
http://osvdb.org/38875
https://exchange.xforce.ibmcloud.com/vulnerabilities/38441
Configurations

Configuration 1

cpe:2.3:a:fenrir:sleipnir:*:r2:*:*:*:*:*:*
cpe:2.3:a:fenrir:grani:*:*:*:*:*:*:*:*
Information

Published : 2007-11-15 10:46

Updated : 2017-07-29 01:33

NVD link : CVE-2007-6002

Mitre link : CVE-2007-6002

Products Affected
No products.
CWE
CWE-79