Published: 17/07/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

The WYSIWYG editor applet in activeWeb contentserver CMS prior to 5.6.2964 only filters malicious tags from articles sent to admin/applets/wysiwyg/rendereditor.asp, which allows remote authenticated users to inject arbitrary JavaScript via a request to admin/worklist/worklist_edit.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
activeweb contentserver

source: wwwsecurityfocuscom/bid/24898/info activeWeb contentserver is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data An attacker can exploit these input-validation vulnerabilities to perform various attacks (eg cross-site scripting, SQL injection, etc) ...

NVD-CWE-Other http://www.redteam-pentesting.de/advisories/rt-sa-2007-006.php http://www.securityfocus.com/bid/24898 http://secunia.com/advisories/26063 http://securityreason.com/securityalert/2900 http://osvdb.org/39745 https://exchange.xforce.ibmcloud.com/vulnerabilities/35399 http://www.securityfocus.com/archive/1/473627/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30299/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3017

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect