CVE

Id
27405  
CVE No.
CVE-2007-4048  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.  
Phase
Assigned (20070730)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
281872 27405 CVE-2007-4048 BUGTRAQ:20070725 PHPSysInfo Index.php Cross Site Scripting  View
281873 27405 CVE-2007-4048 URL:http://www.securityfocus.com/archive/1/archive/1/474756/100/0/threaded  View
281874 27405 CVE-2007-4048 CONFIRM:http://download.phpgroupware.org/  View
281875 27405 CVE-2007-4048 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=532143  View
281876 27405 CVE-2007-4048 BID:25090  View
281877 27405 CVE-2007-4048 URL:http://www.securityfocus.com/bid/25090  View
281878 27405 CVE-2007-4048 OSVDB:36601  View
281879 27405 CVE-2007-4048 URL:http://osvdb.org/36601  View
281880 27405 CVE-2007-4048 SECUNIA:26248  View
281881 27405 CVE-2007-4048 URL:http://secunia.com/advisories/26248  View
281882 27405 CVE-2007-4048 SECUNIA:26473  View
281883 27405 CVE-2007-4048 URL:http://secunia.com/advisories/26473  View
281884 27405 CVE-2007-4048 SREASON:2952  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53730 JVNDB-2007-002422 ADempiere Bazaar の WebUI におけるシステムレベルのウインドウにアクセスされる脆弱性 ADempiere Bazaar の WebUI には、システムレベルのウインドウにアクセスされる脆弱性が存在します。 CVE-2007-4050 27405 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002422.html  View