Unscored severity · published Oct 12, 2007
CVE-2007-5426
Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Activekb NX · Interspire
2.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5426
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5426
osvdb.org
http://osvdb.org/37661
secunia.com
http://secunia.com/advisories/27194
securityreason.com
http://securityreason.com/securityalert/3216
Exploit
http://securityvulns.ru/Rdocument956.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/482006/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26027
More from Activekb NX
–
CVE-2007-5131
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action