CVE-2007-1050

{"id": "CVE-2007-1050", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-02-21T23:28:00.000", "references": [{"url": "http://forums.avenir-geopolitique.net/viewtopic.php?t=2686", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/33317", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/33318", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/33319", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24222", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2270", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/460598/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22635", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0679", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32581", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via (1) the go parameter, (2) the keyword parameter in the search menu (go=search), or (3) the username or (4) the password in a go=Login action."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de tipo cross-site scripting (XSS) en el archivo index.php en MyCalendar de AbleDesign, permiten a los atacantes remotos inyectar un script web o HTML arbitrario por medio de (1) el par\u00e1metro go, (2) el par\u00e1metro keyword en el men\u00fa de b\u00fasqueda (go=search), o (3) el nombre de usuario o (4) la contrase\u00f1a en una acci\u00f3n go=Login."}], "lastModified": "2018-10-16T16:36:29.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:abledesign:mycalendar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2C95CEB-B0A7-4FE6-962E-14EA8B80D449"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}