NVD

Id
56836  
Name
CVE-2007-4717  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-05  
Modified Date
2011-03-07  
Seq
2007-4717  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289897 56836 CVE-2007-4717 http://www.claroline.net/forum/viewtopic.php?t=13448  View
289898 56836 CVE-2007-4717 http://www.claroline.net/wiki/index.php/Changelog_1.8.x#Security  View
289899 56836 CVE-2007-4717 25521  View
289900 56836 CVE-2007-4717 ADV-2007-3045  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53897 JVNDB-2007-002589 Claroline におけるクロスサイトスクリプティングの脆弱性 Claroline には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4717 28072 CVE-2007-4717 56836 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002589.html 2007-09-05 2012-06-26 View