Vulnerability Description
Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows remote attackers to inject arbitrary web script or HTML via a search string.
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Awffull | Awffull | <= 3.7.1 |
References
- http://osvdb.org/37478
- http://secunia.com/advisories/25776
- http://www.securityfocus.com/bid/24587
- http://www.stedee.id.au/awffull/changes
- http://www.stedee.id.au/flyspray/task/10Patch
- http://www.stedee.id.au/pipermail/awffull/2007-May/000363.html
- http://www.stedee.id.au/pipermail/awffull/2007-May/000364.html
- http://www.stedee.id.au/pipermail/awffull/2007-May/000365.html
- http://www.vupen.com/english/advisories/2007/2250
- http://osvdb.org/37478
- http://secunia.com/advisories/25776
- http://www.securityfocus.com/bid/24587
- http://www.stedee.id.au/awffull/changes
- http://www.stedee.id.au/flyspray/task/10Patch
- http://www.stedee.id.au/pipermail/awffull/2007-May/000363.html
FAQ
What is CVE-2007-3299?
CVE-2007-3299 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows remote attackers to inject arbitrary web script or HTML via a s...
How severe is CVE-2007-3299?
CVE-2007-3299 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-3299?
Check the references section above for vendor advisories and patch information. Affected products include: Awffull Awffull.