NVD

Id
53521  
Name
CVE-2007-1331  
Description
Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme, one of which may be the q parameter to the search program. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-03-07  
Modified Date
2008-09-05  
Seq
2007-1331  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271053 53521 CVE-2007-1331 2385  View
271054 53521 CVE-2007-1331 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893  View
271055 53521 CVE-2007-1331 http://www.scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt  View
271056 53521 CVE-2007-1331 20070305 ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities  View
271057 53521 CVE-2007-1331 22829  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56523 JVNDB-2007-005215 TKS Banking Solutions ePortfolio Java におけるクロスサイトスクリプティングの脆弱性 TKS Banking Solutions ePortfolio Java は、クライアント側の保護スキームを回避される検索プログラムへの q パラメータなどに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1331 24686 CVE-2007-1331 53521 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005215.html 2007-03-07 2012-12-20 View