NVD

Id
53451  
Name
CVE-2007-1248  
Description
Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) uid, and (3) nid parameters to (a) news.php, and the nid parameter to (b) rating.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-03-03  
Modified Date
2011-03-07  
Seq
2007-1248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270587 53451 CVE-2007-1248 2343  View
270588 53451 CVE-2007-1248 20070301 Built2Go v.1.0 => ( news.php & rating.php ) Cross Site Scripting  View
270589 53451 CVE-2007-1248 22783  View
270590 53451 CVE-2007-1248 ADV-2007-0818  View
270591 53451 CVE-2007-1248 newsmanagerblog-news-rating-xss(32772)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52954 JVNDB-2007-001646 built2go News Manager Blog におけるクロスサイトスクリプティングの脆弱性 built2go News Manager Blog には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1248 24603 CVE-2007-1248 53451 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001646.html 2007-03-03 2012-06-26 View