NVD

Id
53185  
Name
CVE-2007-0973  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-15  
Modified Date
2008-11-15  
Seq
2007-0973  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269116 53185 CVE-2007-0973 http://mgsdl.free.fr/advisories/12070214.txt  View
269117 53185 CVE-2007-0973 http://www.acid-root.new.fr/advisories/12070214.txt  View
269118 53185 CVE-2007-0973 20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities  View
269119 53185 CVE-2007-0973 20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities  View
269120 53185 CVE-2007-0973 22560  View
269121 53185 CVE-2007-0973 jupitercm-loggedguests-xss(32518)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54698 JVNDB-2007-003390 Jupiter CMS の index.php におけるクロスサイトスクリプティングの脆弱性 Jupiter CMS の index.php には、管理者が Logged Guest アクションが実行する際に適切にサニタイズせずに表示される不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0973 24328 CVE-2007-0973 53185 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003390.html 2007-02-15 2012-09-25 View