NVD

Id
56109  
Name
CVE-2007-3973  
Description
Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-25  
Modified Date
2011-03-07  
Seq
2007-3973  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285757 56109 CVE-2007-3973 2919  View
285758 56109 CVE-2007-3973 4211  View
285759 56109 CVE-2007-3973 20070720 JBlog 1.0 Creat Admin exploit, xss, Cookie Manipulation  View
285760 56109 CVE-2007-3973 24991  View
285761 56109 CVE-2007-3973 ADV-2007-2611  View
285762 56109 CVE-2007-3973 jblog-index-xss(35551)  View
285763 56109 CVE-2007-3973 jblog-recherche-xss(35556)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55485 JVNDB-2007-004177 JBlog におけるクロスサイトスクリプティングの脆弱性 JBlog には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3973 27328 CVE-2007-3973 56109 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004177.html 2007-07-25 2012-09-25 View