NVD

Id
57160  
Name
CVE-2007-5072  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/, as demonstrated by the user_colors[bg_color] parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-24  
Modified Date
2008-09-05  
Seq
2007-5072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291842 57160 CVE-2007-5072 http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt  View
291843 57160 CVE-2007-5072 20070925 Simple PHP Blog Multiple Vulnerabilities  View
291844 57160 CVE-2007-5072 25802  View
291845 57160 CVE-2007-5072 http://www.simplephpblog.com/comments.php?y=07&m=09&entry=entry070923-004446  View
291846 57160 CVE-2007-5072 http://www.simplephpblog.com/index.php?m=09&y=07  View
291847 57160 CVE-2007-5072 simplephpblog-userstyle-xss(36783)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53991 JVNDB-2007-002683 SPHPBlog におけるクロスサイトスクリプティングの脆弱性 Simple PHP Blog (SPHPBlog) には、register_globals が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5072 28427 CVE-2007-5072 57160 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002683.html 2007-09-24 2012-06-26 View