CVE-2007-2071
Summary
| CVE | CVE-2007-2071 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-04-18 03:19:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition before 20070416 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) pub/modules/d/_top.html; (2) /pub/modules/a/_access.html; (3) _circletop.html or (4) _cir66.html in pub/modules/ci/; or (5) _fri66.html, (6) _inv66.html, (7) _top.html, (8) _friends.html, or (9) _fri33.html in pub/modules/f/. |
Risk And Classification
Primary CVSS: v2.0 4.3 from [email protected]
AV:N/AC:M/Au:N/C:N/I:P/A:N
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Open-gorotto | Open-gorotto | 2.0_a | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVN#84646028: open-gorotto におけるクロスサイトスクリプティングの脆弱性 | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | |
| release.open-gorotto.jp/openg_patch_20070416.tar.gz | af854a3a-2127-422b-91ae-364da2661108 | release.open-gorotto.jp | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| osvdb.org/37597 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37596 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37600 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37595 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37601 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37594 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37593 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Open-Gorotto Multiple Unspecified HTML-injection Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| release.open-gorotto.jp | af854a3a-2127-422b-91ae-364da2661108 | release.open-gorotto.jp | |
| osvdb.org/37598 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| osvdb.org/37599 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| JVN:JVN#84646028 | MITRE | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.