Vulnerabilities > CVE-2007-4365 - Cross-Site Scripting vulnerability in Content Management System

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

exv2

NVD

Published: 2007-08-15

Updated: 2018-10-15

Summary

Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a set_lang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965.

Vulnerable Configurations

Part	Description	Count
Application	Exv2 Exv2 Content Management System *	1

References

http://osvdb.org/36479
http://securityreason.com/securityalert/3021
http://www.i-s-o.org/security.txt
http://www.securityfocus.com/archive/1/476287/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/35992