CVE-2007-0595 - Vulnerability Details - OpenCVE

Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter (aka the search box).

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Designmind	High5 Review Script

Configuration 1 [-]

cpe:2.3:a:designmind:high5_review_script:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/32974
http://secunia.com/advisories/23905
http://www.securityfocus.com/archive/1/458122/100/0/threaded
http://www.vupen.com/english/advisories/2007/0363
https://exchange.xforce.ibmcloud.com/vulnerabilities/31797

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-01-30T18:00:00

Updated: 2024-08-07T12:26:54.415Z

Reserved: 2007-01-30T00:00:00

Link: CVE-2007-0595

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-01-30T18:28:00.000

Modified: 2024-11-21T00:26:16.100

Link: CVE-2007-0595

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-25T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter (aka the search box)."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "32974", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/32974"}, {"name": "high5review-search-xss(31797)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31797"}, {"name": "ADV-2007-0363", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0363"}, {"name": "20070125 high5 Review script Security Risk", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/458122/100/0/threaded"}, {"name": "23905", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23905"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0595", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter (aka the search box)."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "32974", "refsource": "OSVDB", "url": "http://osvdb.org/32974"}, {"name": "high5review-search-xss(31797)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31797"}, {"name": "ADV-2007-0363", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0363"}, {"name": "20070125 high5 Review script Security Risk", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/458122/100/0/threaded"}, {"name": "23905", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23905"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:26:54.415Z"}, "title": "CVE Program Container", "references": [{"name": "32974", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/32974"}, {"name": "high5review-search-xss(31797)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31797"}, {"name": "ADV-2007-0363", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0363"}, {"name": "20070125 high5 Review script Security Risk", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/458122/100/0/threaded"}, {"name": "23905", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23905"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0595", "datePublished": "2007-01-30T18:00:00", "dateReserved": "2007-01-30T00:00:00", "dateUpdated": "2024-08-07T12:26:54.415Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:designmind:high5_review_script:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F52BC4C-B917-44EE-99E8-7E818A7CD3CA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter (aka the search box)."}, {"lang": "es", "value": "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en una b\u00fasqueda en High 5 Review Site permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del par\u00e1metro q (tambi\u00e9n se conoce como el cuadro de b\u00fasqueda)."}], "id": "CVE-2007-0595", "lastModified": "2024-11-21T00:26:16.100", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-01-30T18:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/32974"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/23905"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/458122/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0363"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31797"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/32974"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/23905"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/458122/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0363"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31797"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}