CVE-2007-2191
Published Apr 24, 2007
Last updated 7 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Call-ID, (4) User-Agent, and unspecified other SIP protocol fields, which are stored in /var/log/asterisk/full and displayed by admin/modules/logfiles/asterisk-full-log.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B44D379F-F380-42EC-9C9A-A4C8314A4BDF"
},
{
"criteria": "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "61A4F116-1FEE-450E-99AE-6AD9ACDDE570"
},
{
"criteria": "cpe:2.3:o:hp:tru64:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1FE64F3F-48F6-493F-A81E-2B106FF73AC1"
},
{
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
},
{
"criteria": "cpe:2.3:o:santa_cruz_operation:sco_unix:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ECCBDA43-9C75-4B36-8C90-EF26B8CD777D"
},
{
"criteria": "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "469B74F2-4B89-42B8-8638-731E92D463B9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:freepbx:freepbx:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A896A046-4843-46B6-A8BA-1E8207AC2915"
},
{
"criteria": "cpe:2.3:a:freepbx:freepbx:2.2_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2B7FDB0-1CB9-49B6-B260-3BE25D7973EC"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]