CVE-2007-3888

{"id": "CVE-2007-3888", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-07-18T23:30:00.000", "references": [{"url": "http://secunia.com/advisories/26105", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2904", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/473868/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24934", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35448", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26105", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/2904", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/473868/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/24934", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35448", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action, possibly related to the term parameter to index.php; or (2) an anonymous blog entry, possibly involving the (a) posted_by, (b) subject, and (c) content parameters to index.php; as demonstrated by the onmouseover attribute of certain elements. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Insanely Simple Blog 0.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de la (1) acci\u00f3n de b\u00fasqueda, posiblemente relacionado con el par\u00e1metro term en index.php; o (2) un entrada an\u00f3nima en el blos, posiblemente afectando los par\u00e1metros (a) posted_by, (b) subject, y (c) content en index.php; como se demostr\u00f3 con el atributo onmouseover de ciertos elementos. NOTA: Algunos de estos detalles se obtuvieron de terceras fuentes de informaci\u00f3n."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:insanely_simple_blog:insanely_simple_blog:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65C9BB0F-6A56-4782-8292-502104BC207D", "versionEndIncluding": "0.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}