PT-2007-4035 · Stalker+1 · Communigate Pro+1

Published 2007-05-16 · Updated 2021-07-23 · CVE-2007-2718

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Stalker CommuniGate Pro versions 5.1.8 and earlier

Description A cross-site scripting issue exists in the WebMail system, allowing remote attackers to inject arbitrary web script or HTML via crafted STYLE tags when using Microsoft Internet Explorer.

Recommendations For versions 5.1.8 and earlier, update to a version later than 5.1.8 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2007-2718

Affected Products

Communigate Pro

Internet Explorer

References · 13

• 🔥 https://exploit-db.com/exploits/30027 · Exploit
• http://secunia.com/advisories/25250 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2718 · Security Note
• http://scanit.be/advisory-2007-05-12.html · Vendor Advisory
• http://securityfocus.com/bid/23950 · Patch
• http://securitytracker.com/id?1018048 · Patch
• http://osvdb.org/36017 · Note
• http://vupen.com/english/advisories/2007/1795 · Note
• http://frsirt.com/english/advisories/2007/1795 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2718 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34266 · Note
• http://communigate.com/CommuniGatePro/History51.html · Note
• http://marc.info/?l=full-disclosure&m=117900749209206&w=2 · Note