CVE-2007-3963

Published Jul 25, 2007

Last updated 6 years ago

Overview

Description: Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php, (2) upgrade-0-3.php, or (3) upgrade-0-4.php in install/, a different vulnerability than CVE-2005-4193.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6814F4A-C8B0-4450-8EC7-91EF26F75F13"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C3D75D7-190D-4EB3-91DD-940B9DCEC07F"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62A0A3E3-831A-4A68-B9BC-02DE2EA92334"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B5D30AD4-DC83-493B-9324-5432C7B6DACE"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62AD324F-3397-4389-A3C0-E0BC94D2199B"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1359EA23-4C62-432C-8E8E-7AE8389EFB06"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB7811B9-46BF-42BF-A9E9-382CC17F1A6A"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE889213-45D4-4DBD-976F-DB061C973E35"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0_rc1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8B67E6CA-EDCD-4824-BB92-FB58504503FE"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0_rc2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6F3A6AF-FD19-4F78-B956-2E37451994E5"
          },
          {
            "criteria": "cpe:2.3:a:usebb:usebb:1.0_rc3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6308C5A-1627-4D54-B23C-2A533493F71D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References