4.3

CVE-2007-4014

Blix <= 0.9.1, Blixed <= 1.0, BlixKrieg <= 2.2 - Reflected Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Mögliche Gegenmaßnahme
Blix: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
blixed: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
BlixKrieg: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordpress ≫ Blix Version 0.9.1
Wordpress ≫ Blixed Version 1.0
Wordpress ≫ Blixkrieg Version 2.2
Weitere Schwachstelleninformationen
SystemWordPress Theme
≫
Produkt Blix
Version *-0.9.1
SystemWordPress Theme
≫
Produkt blixed
Version *-1.0
SystemWordPress Theme
≫
Produkt BlixKrieg
Version *-2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.55% 0.835
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/26109
Vendor Advisory
http://secunia.com/advisories/26115
Vendor Advisory
http://secunia.com/advisories/26116
Vendor Advisory
http://www.osvdb.org/37056
http://www.osvdb.org/37057
http://www.securityfocus.com/bid/24954
https://exchange.xforce.ibmcloud.com/vulnerabilities/35472
https://exchange.xforce.ibmcloud.com/vulnerabilities/35473
https://exchange.xforce.ibmcloud.com/vulnerabilities/35474
https://www.wordfence.com/threat-intel/vulnerabilities/id/928584e5-7391-4442-820e-d5d5fc288572
Third Party Advisory