NVD

Id
55727  
Name
CVE-2007-3577  
Description
PHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location.search and (2) document.referrer; (3) certain use of document.location.hash; (4) certain "window[eval" and similar expressions; (5) certain Function expressions; (6) certain "=" expressions, as demonstrated by a "whatever="something"" sequence; and (7) certain "with" expressions, which allows remote attackers to inject arbitrary web script.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-05  
Modified Date
2008-11-15  
Seq
2007-3577  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283388 55727 CVE-2007-3577 http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0  View
283389 55727 CVE-2007-3577 http://sla.ckers.org/forum/read.php?2,13209,13218  View
283390 55727 CVE-2007-3577 phpids-multiple-xss(35489)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57118 JVNDB-2007-005810 PHP iCalendar の print.php における任意の Web スクリプトを挿入される脆弱性 PHPIDS は、以下の substr メソッドの使用を適切に処理しないため、任意の Web スクリプトを挿入される脆弱性が存在します。 CVE-2007-3577 26932 CVE-2007-3577 55727 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005810.html 2007-07-02 2012-12-20 View