Published: 15/07/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver prior to 5.6.2964 allow remote malicious users to inject arbitrary web script or HTML via the msg parameter to (1) errors/rights.asp or (2) errors/transaction.asp, or (3) the name of a MIME type (mimetype).

Vulnerable Product	Search on Vulmon	Subscribe to Product
activeweb contentserver

source: wwwsecurityfocuscom/bid/24895/info activeWeb contentserver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected s ...

source: wwwsecurityfocuscom/bid/24895/info activeWeb contentserver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected ...

ActiveWeb Contentserver CMS versions 562929 and below suffer from a cross site scripting vulnerability ...

NVD-CWE-Other http://www.redteam-pentesting.de/advisories/rt-sa-2007-005.php http://www.securityfocus.com/bid/24895 http://www.securityfocus.com/bid/24896 http://www.osvdb.org/36259 http://www.osvdb.org/36260 http://www.osvdb.org/36261 http://secunia.com/advisories/26063 https://exchange.xforce.ibmcloud.com/vulnerabilities/35389 http://www.securityfocus.com/archive/1/473631/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30297/

CVE-2007-3014

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect