CVE-2007-0407

Mô tả

Tham khảo

• osvdb.org/32928
• secunia.com/advisories/23754 · Vendor Advisory
• plainblack.com/bugs/tracker/security-update-cross-site-scripting-vulnerability
• plainblack.com/downloads/builds/7.3.5-beta/WebGUI/docs/changelog/7.x.x.txt
• securityfocus.com/bid/22114
• vupen.com/english/advisories/2007/0242
• exchange.xforce.ibmcloud.com/vulnerabilities/31573

Lỗ hổng khác của webgui

• CVE-2008-2077NGHIÊM TRỌNG 10.0Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."
• CVE-2007-6487TRUNG BÌNH 4.9Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to cr…
• CVE-2007-2746THẤP 3.5The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures cont…
• CVE-2007-0629TRUNG BÌNH 6.4The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unaut…
• CVE-2007-0308TRUNG BÌNH 6.8Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or…