7.5
CVE-2007-0266
- EPSS 1.26%
- Veröffentlicht 16.01.2007 23:28:00
- Zuletzt bearbeitet 16.06.2026 22:35:14
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ezboxx ≫ Ezboxx Portal System Version <= beta_0.7.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.26% | 0.657 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.bugsec.com/articles.php?Security=20
http://www.securityfocus.com/archive/1/456699/100/0/threaded
http://www.vupen.com/english/advisories/2007/0208
http://secunia.com/advisories/23759
http://osvdb.org/32825
http://osvdb.org/33466