CVEvulnerability
CVE-2007-3807
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-07-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or HTML via the user name field in the login procedure, and other unspecified vectors.
Affected configurations
• sitescape sitescape forum (<= 7.2)
References
- http://osvdb.org/36844 osvdb.org
- http://secunia.com/advisories/26065 Patch
- http://securityreason.com/securityalert/2893 securityreason.com
- http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159 www.scip.ch
- http://www.securityfocus.com/archive/1/473624/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24893 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35395 exchange.xforce.ibmcloud.com
- http://osvdb.org/36844 osvdb.org
- http://secunia.com/advisories/26065 Patch
- http://securityreason.com/securityalert/2893 securityreason.com
- http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159 www.scip.ch
- http://www.securityfocus.com/archive/1/473624/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24893 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35395 exchange.xforce.ibmcloud.com