CVE-2007-6001

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) func or (2) date parameter, or the jid parameter in a (3) log or (4) user action, a different vulnerability than CVE-2007-3910.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.03% chance of exploitation in the next 30 days, 80th percentile

Published

2007-11-15

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30801

References

• CVE Record
• NVD entry

Related

• CVE-2007-6000
• CVE-2007-6003
• CVE-2007-5999
• CVE-2007-6004
• CVE-2007-5998
• CVE-2007-6005