Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, a different vulnerability than CVE-2007-4713. NOTE: this can be leveraged to capture login credentials in some browsers that support remembered (auto-completed) passwords.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-09-26T23:00:00

Updated: 2024-08-07T15:17:28.284Z

Reserved: 2007-09-26T00:00:00

Link: CVE-2007-5112

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-09-26T23:17:00.000

Modified: 2024-11-21T00:37:09.193

Link: CVE-2007-5112

cve-icon Redhat

No data.