NVD

Id
55569  
Name
CVE-2007-3417  
Description
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string, which is not sanitized when an HREF attribute is printed by the (1) process_search or (2) show_recent_searches function.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-06-26  
Modified Date
2008-11-15  
Seq
2007-3417  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282576 55569 CVE-2007-3417 http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458  View
282577 55569 CVE-2007-3417 http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57057 JVNDB-2007-005749 web-app.org WebAPP の cgi-bin/cgi-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 web-app.org WebAPP の cgi-bin/cgi-lib/search.pl は、(1) process_search または (2) show_recent_searches 関数が HREF 属性を出力する際にサニタイズされない不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3417 26772 CVE-2007-3417 55569 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005749.html 2007-06-26 2012-12-20 View