NVD

Id
54688  
Name
CVE-2007-2524  
Description
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-05-08  
Modified Date
2012-11-05  
Seq
2007-2524  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277627 54688 CVE-2007-2524 2668  View
277628 54688 CVE-2007-2524 DSA-1298  View
277629 54688 CVE-2007-2524 SUSE-SR:2007:013  View
277630 54688 CVE-2007-2524 20070507 OTRS <= 2.0.x XSS/XSRF  View
277631 54688 CVE-2007-2524 20070611 Re: [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial ofservice  View
277632 54688 CVE-2007-2524 23862  View
277633 54688 CVE-2007-2524 http://www.virtuax.be/?page=library&id=35&type=Exploits  View
277634 54688 CVE-2007-2524 ADV-2007-1698  View
277635 54688 CVE-2007-2524 otrs-indexpl-xss(34164)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55117 JVNDB-2007-003809 OTRS の index.pl におけるクロスサイトスクリプティングの脆弱性 Open Ticket Request System (OTRS) の index.pl には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2524 25879 CVE-2007-2524 54688 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003809.html 2007-05-08 2012-09-25 View