cvelist/2007/3xxx/CVE-2007-3918.json

92 lines
2.9 KiB
JSON
Raw Normal View History

2017-10-16 12:31:07 -04:00
{
2019-03-18 03:06:08 +00:00
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-3918",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
2017-10-16 12:31:07 -04:00
{
2019-03-18 03:06:08 +00:00
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter."
2017-10-16 12:31:07 -04:00
}
2019-03-18 03:06:08 +00:00
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "25923",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/25923"
},
{
"name": "http://gforge.org/tracker/?func=detail&atid=105&aid=3094&group_id=1",
"refsource": "CONFIRM",
"url": "http://gforge.org/tracker/?func=detail&atid=105&aid=3094&group_id=1"
},
{
"name": "DSA-1383",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2007/dsa-1383"
},
{
"name": "ADV-2007-3356",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3356"
},
{
"name": "http://gforge.org/scm/viewvc.php/trunk/gforge/www/account/verify.php?root=gforge&r1=5967&r2=6092",
"refsource": "CONFIRM",
"url": "http://gforge.org/scm/viewvc.php/trunk/gforge/www/account/verify.php?root=gforge&r1=5967&r2=6092"
},
{
"name": "27046",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27046"
},
{
"name": "27042",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27042"
}
]
}
}