NVD

Id
57759  
Name
CVE-2007-5702  
Description
Cross-site scripting (XSS) vulnerability in swamp/action/LoginActions (aka the login box) in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-29  
Modified Date
2008-09-05  
Seq
2007-5702  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295585 57759 CVE-2007-5702 http://swamp.svn.sourceforge.net/viewvc/swamp/trunk/swamp/webapps/webswamp/src/java/de/suse/swamp/modules/actions/LoginActions.java?r1=666&r2=700  View
295586 57759 CVE-2007-5702 20071024 Novell OpenSUSE SWAMP multiple XSS  View
295587 57759 CVE-2007-5702 26198  View
295588 57759 CVE-2007-5702 novell-swamp-login-xss(37399)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55890 JVNDB-2007-004582 Novell OpenSUSE SWAMP Workflow Administration などにおけるクロスサイトスクリプティングの脆弱性 Novell OpenSUSE SWAMP Workflow Administration および Management Platform の swamp/action/LoginActions には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5702 29057 CVE-2007-5702 57759 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004582.html 2007-10-24 2012-09-25 View