CVE-2007-2907

MEDIUM 4.9CVE-2007-2907 · Published 30/05/2007 · updated 16/06/2026

In short

CVE-2007-2907 is a MEDIUM (CVSS 4.9) vulnerability affecting ssl-explorer (ssl-explorer).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ssl-explorer ssl-explorer	`≤ 0.2.12`	No fix yet

Description

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.

References

osvdb.org/36913
osvdb.org/36915
secunia.com/advisories/25512 · Vendor Advisory
sourceforge.net/forum/forum.php · Patch
securityfocus.com/bid/24319
vupen.com/english/advisories/2007/2057 · Vendor Advisory

More vulnerabilities in ssl-explorer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free