ByteOS Network

NVD Vulnerability Details :

CVE-2007-5932

Modified

Source-cve@mitre.org

Published At-10 Nov, 2007 | 11:46

Updated At-29 Jul, 2017 | 01:33

Multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the (1) search function, (2) advanced search function, and possibly other components.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

fatwire>>fatwire_content_server>>6.3.0

cpe:2.3:a:fatwire:fatwire_content_server:6.3.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/38703	cve@mitre.org	N/A
http://osvdb.org/38704	cve@mitre.org	N/A
http://secunia.com/advisories/27663	cve@mitre.org	N/A
http://www.portcullis-security.com/223.php	cve@mitre.org	N/A
http://www.securityfocus.com/bid/26472	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/3910	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/38305	cve@mitre.org	N/A