Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2007-0534
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-26 Jan, 2007 | 01:28
Updated At-23 Apr, 2026 | 00:35

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules for Drupal allow remote authenticated users to inject arbitrary web script or HTML via (a) certain "fields on project nodes" or (b) "certain project-specific settings regarding issue tracking."

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
The Drupal Association
drupal
>>project>>Versions up to 5(inclusive)
cpe:2.3:a:drupal:project:*:*:*:*:*:*:*:*
The Drupal Association
drupal
>>project>>4.6.0
cpe:2.3:a:drupal:project:4.6.0:*:*:*:*:*:*:*
The Drupal Association
drupal
>>project_issue_tracking_module>>Versions up to 5(inclusive)
cpe:2.3:a:drupal:project_issue_tracking_module:*:*:*:*:*:*:*:*
The Drupal Association
drupal
>>project_issue_tracking_module>>4.7.0
cpe:2.3:a:drupal:project_issue_tracking_module:4.7.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://drupal.org/node/112146cve@mitre.org
N/A
http://osvdb.org/32133cve@mitre.org
N/A
http://secunia.com/advisories/23908cve@mitre.org
N/A
http://www.securityfocus.com/bid/22224cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2007/0312cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/31728cve@mitre.org
N/A
http://drupal.org/node/112146af854a3a-2127-422b-91ae-364da2661108
N/A
http://osvdb.org/32133af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/23908af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/22224af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2007/0312af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/31728af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://drupal.org/node/112146
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://osvdb.org/32133
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/23908
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/22224
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/0312
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/31728
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://drupal.org/node/112146
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://osvdb.org/32133
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/23908
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/22224
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/0312
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/31728
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found