4.3
CVE-2007-2916
- EPSS 1.29%
- Veröffentlicht 30.05.2007 10:30:00
- Zuletzt bearbeitet 16.06.2026 22:40:41
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gmtt ≫ Music Distro Version1.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.29% | 0.664 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063515.html
http://osvdb.org/36571
http://secunia.com/advisories/25385
http://securityreason.com/securityalert/2745
http://www.securityfocus.com/archive/1/469269/100/0/threaded
http://www.securityfocus.com/bid/24108
http://www.vupen.com/english/advisories/2007/1938
https://exchange.xforce.ibmcloud.com/vulnerabilities/34440