PT-2007-3929 · Openld · Openld

Published 2007-05-11 · Updated 2024-02-14 · CVE-2007-2610

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenLD versions prior to 1.1.9 OpenLD 1.1-modified versions prior to 1.1-modified3

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter.

Recommendations For OpenLD versions prior to 1.1.9, update to version 1.1.9 or later. For OpenLD 1.1-modified versions prior to 1.1-modified3, update to version 1.1-modified3 or later.

Fix

Related Identifiers

CVE-2007-2610

Affected Products

Openld

References · 9

• http://openld.com/forum/viewtopic.php?id=217 · Patch
• http://openld.com/forum/viewtopic.php?id=216 · Patch
• http://securityfocus.com/bid/23896 · Patch
• http://sourceforge.net/project/shownotes.php?release_id=507099 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2610 · Security Note
• http://secunia.com/advisories/25168 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1730 · Note
• http://osvdb.org/35871 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34198 · Note