NVD

Id
54241  
Name
CVE-2007-2071  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition before 20070416 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) pub/modules/d/_top.html; (2) /pub/modules/a/_access.html; (3) _circletop.html or (4) _cir66.html in pub/modules/ci/; or (5) _fri66.html, (6) _inv66.html, (7) _top.html, (8) _friends.html, or (9) _fri33.html in pub/modules/f/.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-04-17  
Modified Date
2011-03-07  
Seq
2007-2071  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275038 54241 CVE-2007-2071 JVN#84646028  View
275039 54241 CVE-2007-2071 http://release.open-gorotto.jp/  View
275040 54241 CVE-2007-2071 http://release.open-gorotto.jp/openg_patch_20070416.tar.gz  View
275041 54241 CVE-2007-2071 23507  View
275042 54241 CVE-2007-2071 ADV-2007-1398  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51597 JVNDB-2007-000259 open-gorotto におけるクロスサイトスクリプティングの脆弱性 会員制のコミュニティサイトを構築するオープンソースのソフトウェアopen-gorotto には、ユーザ名の出力が不適切であり、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2071 25426 CVE-2007-2071 54241 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000259.html 2007-04-16 2007-05-10 View