CVE-2007-1947

Firebug 1.03 - Rep.JS Script Code Injection

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2007-1947 has a selected CVSS score of 3.5; EIP currently links 1 catalogued exploit.

Description

Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome by overwriting the toString function via a certain function declaration, related to incorrect identification of anonymous JavaScript functions, a different issue than CVE-2007-1878.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBFirebug 1.03 - Rep.JS Script Code InjectionExploitDB exploitby Thor LarholmNot analyzed1 file
ExploitDB
PoC details

References

3