CVEvulnerability
CVE-2007-1780
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to 0.5.11, when invoked with the -x option, allows remote attackers to inject arbitrary web script or HTML via fields in certain input forms.
Affected configurations
• overlay weaver overlay weaver 0.5.9
• overlay weaver overlay weaver 0.5.10
• overlay weaver overlay weaver 0.5.11
References
- http://jvn.jp/jp/JVN%2362399483/index.html jvn.jp
- http://overlayweaver.sourceforge.net/news/ overlayweaver.sourceforge.net
- http://secunia.com/advisories/24669 Vendor Advisory
- http://www.securityfocus.com/bid/23195 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1167 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33340 exchange.xforce.ibmcloud.com
- http://jvn.jp/jp/JVN%2362399483/index.html jvn.jp
- http://overlayweaver.sourceforge.net/news/ overlayweaver.sourceforge.net
- http://secunia.com/advisories/24669 Vendor Advisory
- http://www.securityfocus.com/bid/23195 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1167 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33340 exchange.xforce.ibmcloud.com