CVE-2007-3211

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-3211
Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://osvdb.org/36382
http://secunia.com/advisories/25504 Patch Vendor Advisory
http://www.securityfocus.com/bid/24441 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/34832
http://osvdb.org/36382
http://secunia.com/advisories/25504 Patch Vendor Advisory
http://www.securityfocus.com/bid/24441 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/34832
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.17:*:*:*:*:*:*:*
cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.20:*:*:*:*:*:*:*
cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.22:*:*:*:*:*:*:*
cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.24.5:*:*:*:*:*:*:*
cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.24.5_r0:*:*:*:*:*:*:*
cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.25:*:*:*:*:*:*:*
cpe:2.3:a:domain_technologie_control:domain_technologie_control:0.25.1:*:*:*:*:*:*:*
History

21 Nov 2024, 00:32

Type Values Removed Values Added
References () http://osvdb.org/36382 - () http://osvdb.org/36382 -
References () http://secunia.com/advisories/25504 - Patch, Vendor Advisory () http://secunia.com/advisories/25504 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/24441 - Patch () http://www.securityfocus.com/bid/24441 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/34832 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/34832 -
Information

Published : 2007-06-14 19:30

Updated : 2024-11-21 00:32

NVD link : CVE-2007-3211

Mitre link : CVE-2007-3211

CVE.ORG link : CVE-2007-3211

JSON object : View

Products Affected

domain_technologie_control

  • domain_technologie_control
CWE
NVD-CWE-Other