Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2007-0437 | First vendor Publication | 2007-08-20 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:S/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 3.5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 6.8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote attackers to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp, (2) the VALUE parameter to cookie.csp, and (3) the PAGE parameter to showsource.csp in csp/samples/; and allow remote authenticated users to inject arbitrary web script or HTML via (4) the ERROR parameter to csp/samples/xmlclasseserror.csp, and unspecified vectors in (5) object.csp and (6) lotteryhistory.csp in csp/samples/. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0437 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 42084 | Cache' Server Page (CSP) csp/samples/lotteryhistory.csp XSS |
| 42083 | Cache' Server Page (CSP) csp/samples/object.csp XSS |
| 42082 | Cache' Server Page (CSP) csp/samples/xmlclasseserror.csp ERROR Parameter XSS |
| 42081 | Cache' Server Page (CSP) showsource.csp PAGE Parameter XSS |
| 42080 | Cache' Server Page (CSP) cookie.csp VALUE Parameter XSS |
| 42079 | Cache' Server Page (CSP) loop.csp TO Parameter XSS |
Sources (Detail)
| Source | Url |
|---|
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:16:30 |
|
| 2024-11-28 12:11:22 |
|
| 2021-05-04 12:05:17 |
|
| 2021-04-22 01:05:51 |
|
| 2020-05-23 00:19:10 |
|
| 2013-05-11 00:41:42 |
|
