CVE-2007-4021

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35583

http://www.vupen.com/english/advisories/2007/2656

http://www.securityfocus.com/bid/25024

http://pridels-team.blogspot.com/2007/07/secure-xss-vuln.html

Details

Source: Mitre, NVD

Published: 2007-07-26

Updated: 2026-04-23

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N