6.8
CVE-2007-2600
- EPSS 2.78%
- Veröffentlicht 11.05.2007 10:19:00
- Zuletzt bearbeitet 16.06.2026 22:39:55
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or the (3) search parameter to search.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wavelink Media ≫ Tutorialcms Version <= 1.00
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.78% | 0.845 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://www.securityfocus.com/bid/23905
http://www.vupen.com/english/advisories/2007/1742
https://www.exploit-db.com/exploits/3887
http://osvdb.org/35892
http://osvdb.org/35893
http://osvdb.org/35894
http://osvdb.org/35895
http://osvdb.org/35896
http://osvdb.org/35897
https://exchange.xforce.ibmcloud.com/vulnerabilities/34215