37661vdb entry
http://osvdb.org/37661 CVE-2007-5426
ActiveKB NX 2.6 - 'index.php' Cross-Site Scripting
Record summary
CVE-2007-5426 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBActiveKB NX 2.6 - 'index.php' Cross-Site ScriptingExploitDB exploitby duritoNot analyzed1 file
References
827194Third-party advisory
http://secunia.com/advisories/27194 3216Third-party advisory
http://securityreason.com/securityalert/3216 securityvulns.ru
http://securityvulns.ru/Rdocument956.html 20071010 Vulnerabilities digestmailing list
http://www.securityfocus.com/archive/1/482006/100/0/threaded 26027vdb entry
http://www.securityfocus.com/bid/26027 activekbnx-page-xss(37066)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/37066 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-5426