CVE-2007-0302

{"id": "CVE-2007-0302", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": true}]}, "published": "2007-01-18T00:28:00.000", "references": [{"url": "http://osvdb.org/32852", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32853", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23787", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2164", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/456970/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22052", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0227", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31521", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Username and (3) Update parameters to (b) Members1.aspx."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en InstantASP 4.1.0 permite a atacantes remotos inyectar scripts web o HTML de su elecci\u00f3n mediante (1) par\u00e1metro SessionID en (a) Logon.aspx, y (2) par\u00e1metro Username y (3) par\u00e1metro Update en (b) Members1.aspx."}], "lastModified": "2018-10-16T16:32:11.870", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:instantasp:instantasp:4.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24470F7C-79ED-4B07-8229-777E868060BA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}