NVD

Id
52664  
Name
CVE-2007-0437  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache" Server Page (CSP) scripts in InterSystems Cache" allow remote attackers to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp, (2) the VALUE parameter to cookie.csp, and (3) the PAGE parameter to showsource.csp in csp/samples/; and allow remote authenticated users to inject arbitrary web script or HTML via (4) the ERROR parameter to csp/samples/xmlclasseserror.csp, and unspecified vectors in (5) object.csp and (6) lotteryhistory.csp in csp/samples/.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-20  
Modified Date
2008-09-05  
Seq
2007-0437  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266028 52664 CVE-2007-0437 http://www.cpni.gov.uk/Products/alerts/2928.aspx  View
266029 52664 CVE-2007-0437 http://www.mwrinfosecurity.com/advisories/mwri_cache-sample-files-xss-advisory_2007-04-04.pdf  View
266030 52664 CVE-2007-0437 http://www.mwrinfosecurity.com/news/1658.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54566 JVNDB-2007-003258 InterSystems Cache" のサンプル CSP スクリプトにおけるクロスサイトスクリプティングの脆弱性 InterSystems Cache" のサンプル Cache" Server Page (CSP) スクリプトには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0437 23792 CVE-2007-0437 52664 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003258.html 2007-08-20 2012-09-25 View