NVD

Id
54020  
Name
CVE-2007-1848  
Description
Cross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or HTML via the desc[][title] field. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-04-03  
Modified Date
2008-09-05  
Seq
2007-1848  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273893 54020 CVE-2007-1848 2522  View
273894 54020 CVE-2007-1848 20070330 DrakeCMS multiple vulerabilities  View
273895 54020 CVE-2007-1848 23216  View
273896 54020 CVE-2007-1848 drakecms-uidta-xss(33332)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53093 JVNDB-2007-001785 Drake CMS の admin/classes/ui.dta.php におけるクロスサイトスクリプティングの脆弱性 Drake CMS の admin/classes/ui.dta.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1848 25203 CVE-2007-1848 54020 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001785.html 2007-04-03 2012-06-26 View