CVE-2007-4301

Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://jvn.jp/jp/JVN%2366303599/index.html
http://osvdb.org/36441
http://secunia.com/advisories/26382	Patch Vendor Advisory
http://www.cgis.biz/script_web_cart/notice200708.html
http://www.securityfocus.com/bid/25261
http://www.securitytracker.com/id?1018554
https://exchange.xforce.ibmcloud.com/vulnerabilities/35946

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:webcart:webcart:2.20:::::::*
	cpe:2.3:a:webcart:webcart:2.25:::::::*

History

No history.

Information

Published : 2007-08-13 19:17

Updated : 2017-07-29 01:32

NVD link : CVE-2007-4301

Mitre link : CVE-2007-4301

CVE.ORG link : CVE-2007-4301

JSON object : View

Products Affected

webcart

webcart

CWE

NVD-CWE-Other

{"id": "CVE-2007-4301", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-08-13T19:17:00.000", "references": [{"url": "http://jvn.jp/jp/JVN%2366303599/index.html", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/36441", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26382", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.cgis.biz/script_web_cart/notice200708.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25261", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1018554", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35946", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el interfaz de gesti\u00f3n de WebCart 2.20 hasta 2.25 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n mediante vectores no especificados."}], "lastModified": "2017-07-29T01:32:50.737", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:webcart:webcart:2.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27319EB1-1AD2-4AD7-AE8E-1289A336040B"}, {"criteria": "cpe:2.3:a:webcart:webcart:2.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53D0737E-F0B1-4AEE-B085-36CB8D815F19"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}