NVD

Id
57195  
Name
CVE-2007-5112  
Description
Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, a different vulnerability than CVE-2007-4713. NOTE: this can be leveraged to capture login credentials in some browsers that support remembered (auto-completed) passwords.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-26  
Modified Date
2008-11-15  
Seq
2007-5112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292009 57195 CVE-2007-5112 http://ha.ckers.org/blog/20070823/xss-and-possible-information-disclosure-in-urchin/  View
292010 57195 CVE-2007-5112 http://hackademix.net/2007/09/24/googhole-xss-pwning-gmail-picasa-and-almost-200k-customers/  View
292011 57195 CVE-2007-5112 3177  View
292012 57195 CVE-2007-5112 http://securityvulns.ru/Sdocument90.html  View
292013 57195 CVE-2007-5112 http://websecurity.com.ua/1283/  View
292014 57195 CVE-2007-5112 http://www.gnucitizen.org/blog/google-urchin-password-theft-madness  View
292015 57195 CVE-2007-5112 20070924 Google Urchin password theft madness  View
292016 57195 CVE-2007-5112 20071010 Vulnerabilities digest  View
292017 57195 CVE-2007-5112 25788  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57458 JVNDB-2007-006150 Google Urchin の session.cgi におけるクロスサイトスクリプティングの脆弱性 Google Urchin の session.cgi には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5112 28467 CVE-2007-5112 57195 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006150.html 2007-09-26 2012-12-20 View