{"api_version":"1","generated_at":"2026-07-23T13:34:08+00:00","cve":"CVE-2007-3653","urls":{"html":"https://cve.report/CVE-2007-3653","api":"https://cve.report/api/cve/CVE-2007-3653.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-3653","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-3653"},"summary":{"title":"CVE-2007-3653","description":"Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-07-09 00:41:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.netvigilance.com/advisory0043","name":"http://www.netvigilance.com/advisory0043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"netVigilance, Inc. - Security Advisory 43","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://descriptions.securescout.com/tc/17973","name":"http://descriptions.securescout.com/tc/17973","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Invalid Testcase ID provided!","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3653","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3653","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"3653","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fascript","cpe5":"faname","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:21:36.554Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"faname-index-page-xss(43502)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.netvigilance.com/advisory0043"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://descriptions.securescout.com/tc/17973"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-06-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"faname-index-page-xss(43502)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502"},{"tags":["x_refsource_MISC"],"url":"http://www.netvigilance.com/advisory0043"},{"tags":["x_refsource_MISC"],"url":"http://descriptions.securescout.com/tc/17973"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-3653","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"faname-index-page-xss(43502)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502"},{"name":"http://www.netvigilance.com/advisory0043","refsource":"MISC","url":"http://www.netvigilance.com/advisory0043"},{"name":"http://descriptions.securescout.com/tc/17973","refsource":"MISC","url":"http://descriptions.securescout.com/tc/17973"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-3653","datePublished":"2008-07-09T00:00:00.000Z","dateReserved":"2007-07-10T00:00:00.000Z","dateUpdated":"2024-08-07T14:21:36.554Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-07-09 00:41:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFFF8451-6F54-4A58-A981-1A1EF4971D6E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"3653","Ordinal":"1","Title":"CVE-2007-3653","CVE":"CVE-2007-3653","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"3653","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php.","Type":"Description","Title":"CVE-2007-3653"},{"CveYear":"2007","CveId":"3653","Ordinal":"2","NoteData":"2008-07-08","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"3653","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}