4.3
CVE-2007-0605
- EPSS 1.97%
- Veröffentlicht 09.05.2007 17:19:00
- Zuletzt bearbeitet 16.06.2026 22:35:54
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Advanced Guestbook ≫ Advanced Guestbook Version2.4.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.97% | 0.778 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/25153
http://securityreason.com/securityalert/2663
http://www.netvigilance.com/advisory0012
http://www.osvdb.org/33877
http://www.securityfocus.com/archive/1/467937/100/0/threaded
http://www.securityfocus.com/bid/23873
http://www.vupen.com/english/advisories/2007/1726
https://exchange.xforce.ibmcloud.com/vulnerabilities/34156