4.3
CVE-2007-3414
- EPSS 1.86%
- Veröffentlicht 26.06.2007 23:30:00
- Zuletzt bearbeitet 16.06.2026 22:41:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Multiple cross-site scripting (XSS) vulnerabilities in access2asp 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) od and (2) search parameters to (a) suppliersList.asp and (b) contactsList.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Access2asp ≫ Access2asp Version <= 4.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.86% | 0.765 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels-team.blogspot.com/2007/06/access2asp-xss-vuln.html
http://secunia.com/advisories/25807
http://www.osvdb.org/37750
http://www.osvdb.org/37751
http://www.vupen.com/english/advisories/2007/2371
https://exchange.xforce.ibmcloud.com/vulnerabilities/35025