NVD

Id
58362  
Name
CVE-2007-6367  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field, different vectors than CVE-2007-2357.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-14  
Modified Date
2009-09-05  
Seq
2007-6367  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299320 58362 CVE-2007-6367 3444  View
299321 58362 CVE-2007-6367 4693  View
299322 58362 CVE-2007-6367 20071205 SineCMS <= 2.3.4 Calendar SQL Injection "n something else..  View
299323 58362 CVE-2007-6367 20071218 Re: SineCMS <= 2.3.4 Calendar SQL Injection "n something else..  View
299324 58362 CVE-2007-6367 sinecms-mods-xss(38893)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57735 JVNDB-2007-006427 SineCMS の guestbook におけるクロスサイトスクリプティングの脆弱性 SineCMS の guestbook には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-6367 29722 CVE-2007-6367 58362 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006427.html 2007-12-14 2012-12-20 View