PT-2007-3929 · Openld · Openld

CVE-2007-2610 · Publicado 2007-05-11 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenLD versions prior to 1.1.9 OpenLD 1.1-modified versions prior to 1.1-modified3

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter.

Recommendations For OpenLD versions prior to 1.1.9, update to version 1.1.9 or later. For OpenLD 1.1-modified versions prior to 1.1-modified3, update to version 1.1-modified3 or later.

Correção

Identificadores relacionados

CVE-2007-2610

Produtos afetados

Openld

Referências · 9

• http://vupen.com/english/advisories/2007/1730 · Nota
• http://openld.com/forum/viewtopic.php?id=217 · Correção
• http://osvdb.org/35871 · Nota
• http://openld.com/forum/viewtopic.php?id=216 · Correção
• http://securityfocus.com/bid/23896 · Correção
• http://sourceforge.net/project/shownotes.php?release_id=507099 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-2610 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34198 · Nota
• http://secunia.com/advisories/25168 · Aviso do Fabricante