CVEvulnerability
CVE-2007-5426
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.
Affected configurations
• interspire activekb nx 2.5.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/37661 osvdb.org
- http://secunia.com/advisories/27194 secunia.com
- http://securityreason.com/securityalert/3216 securityreason.com
- http://securityvulns.ru/Rdocument956.html Exploit
- http://www.securityfocus.com/archive/1/482006/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26027 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37066 exchange.xforce.ibmcloud.com
- http://osvdb.org/37661 osvdb.org
- http://secunia.com/advisories/27194 secunia.com
- http://securityreason.com/securityalert/3216 securityreason.com
- http://securityvulns.ru/Rdocument956.html Exploit
- http://www.securityfocus.com/archive/1/482006/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26027 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37066 exchange.xforce.ibmcloud.com