CVEvulnerability
CVE-2007-6002
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-11-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Fenriru (1) Sleipnir 2.5.17 R2 and earlier and (2) Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section.
Affected configurations
• fenrir grani (<= 3.0)
• fenrir sleipnir (<= 2.5.17)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/jp/JVN%2365427327/index.html jvn.jp
- http://osvdb.org/38875 osvdb.org
- http://osvdb.org/38876 osvdb.org
- http://secunia.com/advisories/27655 Patch, Vendor Advisory
- http://secunia.com/advisories/27675 Patch, Vendor Advisory
- http://www.fenrir.co.jp/grani/note.html www.fenrir.co.jp
- http://www.fenrir.co.jp/sleipnir/note.html www.fenrir.co.jp
- http://www.securityfocus.com/bid/26418 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38441 exchange.xforce.ibmcloud.com
- http://jvn.jp/jp/JVN%2365427327/index.html jvn.jp
- http://osvdb.org/38875 osvdb.org
- http://osvdb.org/38876 osvdb.org
- http://secunia.com/advisories/27655 Patch, Vendor Advisory
- http://secunia.com/advisories/27675 Patch, Vendor Advisory
- http://www.fenrir.co.jp/grani/note.html www.fenrir.co.jp
- http://www.fenrir.co.jp/sleipnir/note.html www.fenrir.co.jp
- http://www.securityfocus.com/bid/26418 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38441 exchange.xforce.ibmcloud.com