Vulnerabilities > CVE-2007-4146 - Cross-Site Scripting vulnerability in WebEvent Webevent.CGI

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
webevents
exploit available
NVD
Published: 2007-08-03
Updated: 2009-09-15

Summary

Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Configurations

Part Description Count
Application
Webevents
5

Exploit-Db

descriptionWebEvent 4.03 Webevent.CGI Cross-Site Scripting Vulnerability. CVE-2007-4146. Webapps exploit for cgi platform
idEDB-ID:30440
last seen2016-02-03
modified2007-07-31
published2007-07-31
reporterd3hydr8
sourcehttps://www.exploit-db.com/download/30440/
titleWebEvent <= 4.03 Webevent.CGI Cross-Site Scripting Vulnerability

References