CVE-2007-3807

Description

Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or HTML via the user name field in the login procedure, and other unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35395

http://www.securityfocus.com/bid/24893

http://www.securityfocus.com/archive/1/473624/100/0/threaded

http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159

http://securityreason.com/securityalert/2893

http://secunia.com/advisories/26065

http://osvdb.org/36844

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS