4.3
CVE-2007-1780
- EPSS 1.22%
- Veröffentlicht 30.03.2007 10:19:00
- Zuletzt bearbeitet 16.06.2026 22:38:16
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to 0.5.11, when invoked with the -x option, allows remote attackers to inject arbitrary web script or HTML via fields in certain input forms.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Overlay Weaver ≫ Overlay Weaver Version0.5.9
Overlay Weaver ≫ Overlay Weaver Version0.5.10
Overlay Weaver ≫ Overlay Weaver Version0.5.11
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.22% | 0.648 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://jvn.jp/jp/JVN%2362399483/index.html
http://overlayweaver.sourceforge.net/news/
http://secunia.com/advisories/24669
http://www.securityfocus.com/bid/23195
http://www.vupen.com/english/advisories/2007/1167
https://exchange.xforce.ibmcloud.com/vulnerabilities/33340