4.3
CVE-2007-4479
- EPSS 1.83%
- Veröffentlicht 22.08.2007 23:17:00
- Zuletzt bearbeitet 16.06.2026 22:44:10
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aleadsoft.Com ≫ Search Engine Builder Professional Version2.40
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.83% | 0.761 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://www.securityfocus.com/archive/1/477253/100/0/threaded
http://osvdb.org/37097
http://secunia.com/advisories/26560
http://securityvulns.ru/Rdocument843.html
http://websecurity.com.ua/1159/
http://www.securityfocus.com/bid/25391
https://exchange.xforce.ibmcloud.com/vulnerabilities/36149