Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-x364-fse4-mfd8
SummaryCross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841.
Aliases
0
alias CVE-2007-2524
Fixed_packages
0
url pkg:deb/debian/otrs2@2.1.1-1?distro=bullseye
purl pkg:deb/debian/otrs2@2.1.1-1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@2.1.1-1%3Fdistro=bullseye
1
url pkg:deb/debian/otrs2@2.2.7-2lenny3
purl pkg:deb/debian/otrs2@2.2.7-2lenny3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rfw-hy3t-4fgd
1
vulnerability VCID-23kg-6hy8-2kfb
2
vulnerability VCID-35gr-98mg-1yfe
3
vulnerability VCID-3s9f-prpy-hbcx
4
vulnerability VCID-47tp-xcrf-vkf4
5
vulnerability VCID-4b65-r8kc-xbcm
6
vulnerability VCID-5618-53yg-8qh4
7
vulnerability VCID-57jx-quzh-fubc
8
vulnerability VCID-59ez-3fcw-9ke1
9
vulnerability VCID-5f4u-bk7e-fyb8
10
vulnerability VCID-6jek-tqbt-rfhc
11
vulnerability VCID-6xvb-p7ds-97bw
12
vulnerability VCID-78dd-x8vv-xbc5
13
vulnerability VCID-79tb-zy1a-tqaf
14
vulnerability VCID-7jwd-q7gg-6baf
15
vulnerability VCID-9431-8f5f-rfct
16
vulnerability VCID-95xu-bm4v-hfbj
17
vulnerability VCID-9aug-utyb-3fbg
18
vulnerability VCID-9fth-879g-a3fn
19
vulnerability VCID-9v46-tmyq-f7bb
20
vulnerability VCID-9vrg-8wae-93ec
21
vulnerability VCID-a286-32jj-eubk
22
vulnerability VCID-az3g-bkpz-jyfs
23
vulnerability VCID-c8cb-aar4-qqhm
24
vulnerability VCID-ced2-4qvr-2yge
25
vulnerability VCID-cjbr-pbsr-xuaw
26
vulnerability VCID-cvxb-rw2p-vuab
27
vulnerability VCID-cvxp-ctj9-guej
28
vulnerability VCID-cwxd-pja8-g3a2
29
vulnerability VCID-cyn6-w9ue-1fdv
30
vulnerability VCID-d4t9-s9ws-uugb
31
vulnerability VCID-dbgf-5hx5-y3f4
32
vulnerability VCID-dqpp-t4x2-afa9
33
vulnerability VCID-dr9z-69dm-akb9
34
vulnerability VCID-drd1-bnmf-57c9
35
vulnerability VCID-e7ak-45qz-cfa9
36
vulnerability VCID-enp1-vd1n-ffg9
37
vulnerability VCID-ew2x-9cat-v3h1
38
vulnerability VCID-f2cv-jtcy-gugt
39
vulnerability VCID-f61h-w9k8-b7ax
40
vulnerability VCID-fz8v-murm-1khj
41
vulnerability VCID-g2j2-tn4a-uqd3
42
vulnerability VCID-gjjf-d58f-m7gu
43
vulnerability VCID-gys4-65yj-xbhg
44
vulnerability VCID-h4xp-dgt9-jfhb
45
vulnerability VCID-h7nm-zq34-fqbs
46
vulnerability VCID-hhhq-1zgu-hqep
47
vulnerability VCID-j27v-9g2t-5qab
48
vulnerability VCID-jg6y-p28f-dbd8
49
vulnerability VCID-jr2g-4ag6-hqey
50
vulnerability VCID-jv8f-vz24-67c2
51
vulnerability VCID-k5qf-ntan-nyar
52
vulnerability VCID-kkx1-64uf-87hf
53
vulnerability VCID-me18-9d3t-a7gr
54
vulnerability VCID-msa1-r3ax-zkeb
55
vulnerability VCID-mvf7-hk9h-zfa4
56
vulnerability VCID-n57t-8s1v-xkaw
57
vulnerability VCID-n6bx-62mu-nkge
58
vulnerability VCID-p1rf-q72p-bbg9
59
vulnerability VCID-p92a-hwnk-dfg7
60
vulnerability VCID-pmnn-f6z1-gbct
61
vulnerability VCID-puce-kthm-jfa7
62
vulnerability VCID-pxet-jht5-hucw
63
vulnerability VCID-q4vw-md7c-53bs
64
vulnerability VCID-qgs4-4qpa-3kbu
65
vulnerability VCID-qu28-hr3t-kkca
66
vulnerability VCID-r7b9-qwh3-7bhr
67
vulnerability VCID-rg2d-x2j3-jycq
68
vulnerability VCID-s4ps-ebu4-6bh5
69
vulnerability VCID-sxy7-tjmp-qbh2
70
vulnerability VCID-t2up-pp1r-xkdu
71
vulnerability VCID-t7ay-kqzz-zbbd
72
vulnerability VCID-tekr-xkck-pkfu
73
vulnerability VCID-u3ed-wmjx-9fcq
74
vulnerability VCID-u8xm-v9ek-yuar
75
vulnerability VCID-ujf1-bbf4-abch
76
vulnerability VCID-ujjt-5d77-r3ex
77
vulnerability VCID-vahe-evfr-w7hd
78
vulnerability VCID-vgt6-eqab-cua9
79
vulnerability VCID-vswx-e9p8-1ugn
80
vulnerability VCID-vvz9-sxyf-u7bn
81
vulnerability VCID-wueh-6rd8-zyg8
82
vulnerability VCID-wzt8-htew-x3dn
83
vulnerability VCID-xpgf-xhha-6kfh
84
vulnerability VCID-ybrp-zh2m-wuh1
85
vulnerability VCID-yj7p-1amk-a3fh
86
vulnerability VCID-ynpn-ctc2-zbhy
87
vulnerability VCID-z2ek-mhha-ubhf
88
vulnerability VCID-zhu3-aqgx-j3ba
89
vulnerability VCID-zsed-p23e-b7g8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@2.2.7-2lenny3
2
url pkg:deb/debian/otrs2@6.0.32-6?distro=bullseye
purl pkg:deb/debian/otrs2@6.0.32-6?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@6.0.32-6%3Fdistro=bullseye
Affected_packages
0
url pkg:deb/debian/otrs2@2.0.4p01-17
purl pkg:deb/debian/otrs2@2.0.4p01-17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rfw-hy3t-4fgd
1
vulnerability VCID-23kg-6hy8-2kfb
2
vulnerability VCID-35gr-98mg-1yfe
3
vulnerability VCID-3s9f-prpy-hbcx
4
vulnerability VCID-3vwj-r1ap-kuhr
5
vulnerability VCID-47tp-xcrf-vkf4
6
vulnerability VCID-4b65-r8kc-xbcm
7
vulnerability VCID-5618-53yg-8qh4
8
vulnerability VCID-57jx-quzh-fubc
9
vulnerability VCID-59ez-3fcw-9ke1
10
vulnerability VCID-5f4u-bk7e-fyb8
11
vulnerability VCID-6jek-tqbt-rfhc
12
vulnerability VCID-6xvb-p7ds-97bw
13
vulnerability VCID-78dd-x8vv-xbc5
14
vulnerability VCID-79tb-zy1a-tqaf
15
vulnerability VCID-7jwd-q7gg-6baf
16
vulnerability VCID-9431-8f5f-rfct
17
vulnerability VCID-95xu-bm4v-hfbj
18
vulnerability VCID-9aug-utyb-3fbg
19
vulnerability VCID-9fth-879g-a3fn
20
vulnerability VCID-9v46-tmyq-f7bb
21
vulnerability VCID-9vrg-8wae-93ec
22
vulnerability VCID-a286-32jj-eubk
23
vulnerability VCID-az3g-bkpz-jyfs
24
vulnerability VCID-c8cb-aar4-qqhm
25
vulnerability VCID-ced2-4qvr-2yge
26
vulnerability VCID-cjbr-pbsr-xuaw
27
vulnerability VCID-cvxb-rw2p-vuab
28
vulnerability VCID-cvxp-ctj9-guej
29
vulnerability VCID-cwxd-pja8-g3a2
30
vulnerability VCID-cyn6-w9ue-1fdv
31
vulnerability VCID-d4t9-s9ws-uugb
32
vulnerability VCID-dbgf-5hx5-y3f4
33
vulnerability VCID-dqpp-t4x2-afa9
34
vulnerability VCID-dr9z-69dm-akb9
35
vulnerability VCID-drd1-bnmf-57c9
36
vulnerability VCID-e7ak-45qz-cfa9
37
vulnerability VCID-enp1-vd1n-ffg9
38
vulnerability VCID-ew2x-9cat-v3h1
39
vulnerability VCID-f2cv-jtcy-gugt
40
vulnerability VCID-f61h-w9k8-b7ax
41
vulnerability VCID-fz8v-murm-1khj
42
vulnerability VCID-g2j2-tn4a-uqd3
43
vulnerability VCID-gjjf-d58f-m7gu
44
vulnerability VCID-gvwu-31f2-gqgm
45
vulnerability VCID-gys4-65yj-xbhg
46
vulnerability VCID-h4xp-dgt9-jfhb
47
vulnerability VCID-h7nm-zq34-fqbs
48
vulnerability VCID-hhhq-1zgu-hqep
49
vulnerability VCID-j27v-9g2t-5qab
50
vulnerability VCID-j31q-dmec-qyg9
51
vulnerability VCID-jg6y-p28f-dbd8
52
vulnerability VCID-jr2g-4ag6-hqey
53
vulnerability VCID-jv8f-vz24-67c2
54
vulnerability VCID-k5qf-ntan-nyar
55
vulnerability VCID-kkx1-64uf-87hf
56
vulnerability VCID-me18-9d3t-a7gr
57
vulnerability VCID-msa1-r3ax-zkeb
58
vulnerability VCID-mvf7-hk9h-zfa4
59
vulnerability VCID-n57t-8s1v-xkaw
60
vulnerability VCID-n6bx-62mu-nkge
61
vulnerability VCID-p1rf-q72p-bbg9
62
vulnerability VCID-p92a-hwnk-dfg7
63
vulnerability VCID-pmnn-f6z1-gbct
64
vulnerability VCID-puce-kthm-jfa7
65
vulnerability VCID-pxet-jht5-hucw
66
vulnerability VCID-q4vw-md7c-53bs
67
vulnerability VCID-qgs4-4qpa-3kbu
68
vulnerability VCID-qu28-hr3t-kkca
69
vulnerability VCID-r7b9-qwh3-7bhr
70
vulnerability VCID-rg2d-x2j3-jycq
71
vulnerability VCID-s1kr-mduu-mqc5
72
vulnerability VCID-s4ps-ebu4-6bh5
73
vulnerability VCID-sxy7-tjmp-qbh2
74
vulnerability VCID-t2up-pp1r-xkdu
75
vulnerability VCID-t7ay-kqzz-zbbd
76
vulnerability VCID-tekr-xkck-pkfu
77
vulnerability VCID-u3ed-wmjx-9fcq
78
vulnerability VCID-u8xm-v9ek-yuar
79
vulnerability VCID-ujf1-bbf4-abch
80
vulnerability VCID-ujjt-5d77-r3ex
81
vulnerability VCID-vahe-evfr-w7hd
82
vulnerability VCID-vgt6-eqab-cua9
83
vulnerability VCID-vswx-e9p8-1ugn
84
vulnerability VCID-vvz9-sxyf-u7bn
85
vulnerability VCID-wueh-6rd8-zyg8
86
vulnerability VCID-wzt8-htew-x3dn
87
vulnerability VCID-x364-fse4-mfd8
88
vulnerability VCID-xpgf-xhha-6kfh
89
vulnerability VCID-xqdc-eyvz-qkbw
90
vulnerability VCID-ybrp-zh2m-wuh1
91
vulnerability VCID-yj7p-1amk-a3fh
92
vulnerability VCID-ynpn-ctc2-zbhy
93
vulnerability VCID-z2ek-mhha-ubhf
94
vulnerability VCID-zhu3-aqgx-j3ba
95
vulnerability VCID-zsed-p23e-b7g8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@2.0.4p01-17
1
url pkg:deb/debian/otrs2@2.0.4p01-18
purl pkg:deb/debian/otrs2@2.0.4p01-18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rfw-hy3t-4fgd
1
vulnerability VCID-23kg-6hy8-2kfb
2
vulnerability VCID-35gr-98mg-1yfe
3
vulnerability VCID-3s9f-prpy-hbcx
4
vulnerability VCID-3vwj-r1ap-kuhr
5
vulnerability VCID-47tp-xcrf-vkf4
6
vulnerability VCID-4b65-r8kc-xbcm
7
vulnerability VCID-5618-53yg-8qh4
8
vulnerability VCID-57jx-quzh-fubc
9
vulnerability VCID-59ez-3fcw-9ke1
10
vulnerability VCID-5f4u-bk7e-fyb8
11
vulnerability VCID-6jek-tqbt-rfhc
12
vulnerability VCID-6xvb-p7ds-97bw
13
vulnerability VCID-78dd-x8vv-xbc5
14
vulnerability VCID-79tb-zy1a-tqaf
15
vulnerability VCID-7jwd-q7gg-6baf
16
vulnerability VCID-9431-8f5f-rfct
17
vulnerability VCID-95xu-bm4v-hfbj
18
vulnerability VCID-9aug-utyb-3fbg
19
vulnerability VCID-9fth-879g-a3fn
20
vulnerability VCID-9v46-tmyq-f7bb
21
vulnerability VCID-9vrg-8wae-93ec
22
vulnerability VCID-a286-32jj-eubk
23
vulnerability VCID-az3g-bkpz-jyfs
24
vulnerability VCID-c8cb-aar4-qqhm
25
vulnerability VCID-ced2-4qvr-2yge
26
vulnerability VCID-cjbr-pbsr-xuaw
27
vulnerability VCID-cvxb-rw2p-vuab
28
vulnerability VCID-cvxp-ctj9-guej
29
vulnerability VCID-cwxd-pja8-g3a2
30
vulnerability VCID-cyn6-w9ue-1fdv
31
vulnerability VCID-d4t9-s9ws-uugb
32
vulnerability VCID-dbgf-5hx5-y3f4
33
vulnerability VCID-dqpp-t4x2-afa9
34
vulnerability VCID-dr9z-69dm-akb9
35
vulnerability VCID-drd1-bnmf-57c9
36
vulnerability VCID-e7ak-45qz-cfa9
37
vulnerability VCID-enp1-vd1n-ffg9
38
vulnerability VCID-ew2x-9cat-v3h1
39
vulnerability VCID-f2cv-jtcy-gugt
40
vulnerability VCID-f61h-w9k8-b7ax
41
vulnerability VCID-fz8v-murm-1khj
42
vulnerability VCID-g2j2-tn4a-uqd3
43
vulnerability VCID-gjjf-d58f-m7gu
44
vulnerability VCID-gvwu-31f2-gqgm
45
vulnerability VCID-gys4-65yj-xbhg
46
vulnerability VCID-h4xp-dgt9-jfhb
47
vulnerability VCID-h7nm-zq34-fqbs
48
vulnerability VCID-hhhq-1zgu-hqep
49
vulnerability VCID-j27v-9g2t-5qab
50
vulnerability VCID-j31q-dmec-qyg9
51
vulnerability VCID-jg6y-p28f-dbd8
52
vulnerability VCID-jr2g-4ag6-hqey
53
vulnerability VCID-jv8f-vz24-67c2
54
vulnerability VCID-k5qf-ntan-nyar
55
vulnerability VCID-kkx1-64uf-87hf
56
vulnerability VCID-me18-9d3t-a7gr
57
vulnerability VCID-msa1-r3ax-zkeb
58
vulnerability VCID-mvf7-hk9h-zfa4
59
vulnerability VCID-n57t-8s1v-xkaw
60
vulnerability VCID-n6bx-62mu-nkge
61
vulnerability VCID-p1rf-q72p-bbg9
62
vulnerability VCID-p92a-hwnk-dfg7
63
vulnerability VCID-pmnn-f6z1-gbct
64
vulnerability VCID-puce-kthm-jfa7
65
vulnerability VCID-pxet-jht5-hucw
66
vulnerability VCID-q4vw-md7c-53bs
67
vulnerability VCID-qgs4-4qpa-3kbu
68
vulnerability VCID-qu28-hr3t-kkca
69
vulnerability VCID-r7b9-qwh3-7bhr
70
vulnerability VCID-rg2d-x2j3-jycq
71
vulnerability VCID-s1kr-mduu-mqc5
72
vulnerability VCID-s4ps-ebu4-6bh5
73
vulnerability VCID-sxy7-tjmp-qbh2
74
vulnerability VCID-t2up-pp1r-xkdu
75
vulnerability VCID-t7ay-kqzz-zbbd
76
vulnerability VCID-tekr-xkck-pkfu
77
vulnerability VCID-u3ed-wmjx-9fcq
78
vulnerability VCID-u8xm-v9ek-yuar
79
vulnerability VCID-ujf1-bbf4-abch
80
vulnerability VCID-ujjt-5d77-r3ex
81
vulnerability VCID-vahe-evfr-w7hd
82
vulnerability VCID-vgt6-eqab-cua9
83
vulnerability VCID-vswx-e9p8-1ugn
84
vulnerability VCID-vvz9-sxyf-u7bn
85
vulnerability VCID-wueh-6rd8-zyg8
86
vulnerability VCID-wzt8-htew-x3dn
87
vulnerability VCID-x364-fse4-mfd8
88
vulnerability VCID-xpgf-xhha-6kfh
89
vulnerability VCID-xqdc-eyvz-qkbw
90
vulnerability VCID-ybrp-zh2m-wuh1
91
vulnerability VCID-yj7p-1amk-a3fh
92
vulnerability VCID-ynpn-ctc2-zbhy
93
vulnerability VCID-z2ek-mhha-ubhf
94
vulnerability VCID-zhu3-aqgx-j3ba
95
vulnerability VCID-zsed-p23e-b7g8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/otrs2@2.0.4p01-18
References
0
reference_url http://osvdb.org/35821
reference_id
reference_type
scores
url http://osvdb.org/35821
1
reference_url http://osvdb.org/35822
reference_id
reference_type
scores
url http://osvdb.org/35822
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-2524
reference_id
reference_type
scores
0
value 0.05656
scoring_system epss
scoring_elements 0.9033
published_at 2026-04-02T12:55:00Z
1
value 0.05656
scoring_system epss
scoring_elements 0.90342
published_at 2026-04-04T12:55:00Z
2
value 0.05656
scoring_system epss
scoring_elements 0.90346
published_at 2026-04-07T12:55:00Z
3
value 0.05656
scoring_system epss
scoring_elements 0.90359
published_at 2026-04-08T12:55:00Z
4
value 0.05656
scoring_system epss
scoring_elements 0.90366
published_at 2026-04-09T12:55:00Z
5
value 0.05656
scoring_system epss
scoring_elements 0.90327
published_at 2026-04-01T12:55:00Z
6
value 0.05802
scoring_system epss
scoring_elements 0.90542
published_at 2026-04-24T12:55:00Z
7
value 0.05802
scoring_system epss
scoring_elements 0.90541
published_at 2026-04-26T12:55:00Z
8
value 0.05802
scoring_system epss
scoring_elements 0.90538
published_at 2026-04-29T12:55:00Z
9
value 0.05802
scoring_system epss
scoring_elements 0.90549
published_at 2026-05-05T12:55:00Z
10
value 0.05802
scoring_system epss
scoring_elements 0.90567
published_at 2026-05-07T12:55:00Z
11
value 0.05802
scoring_system epss
scoring_elements 0.90578
published_at 2026-05-09T12:55:00Z
12
value 0.05802
scoring_system epss
scoring_elements 0.90576
published_at 2026-05-11T12:55:00Z
13
value 0.05802
scoring_system epss
scoring_elements 0.90585
published_at 2026-05-12T12:55:00Z
14
value 0.05802
scoring_system epss
scoring_elements 0.90599
published_at 2026-05-14T12:55:00Z
15
value 0.05802
scoring_system epss
scoring_elements 0.90518
published_at 2026-04-12T12:55:00Z
16
value 0.05802
scoring_system epss
scoring_elements 0.90511
published_at 2026-04-13T12:55:00Z
17
value 0.05802
scoring_system epss
scoring_elements 0.9053
published_at 2026-04-16T12:55:00Z
18
value 0.05802
scoring_system epss
scoring_elements 0.90529
published_at 2026-04-18T12:55:00Z
19
value 0.05802
scoring_system epss
scoring_elements 0.90527
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-2524
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2524
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2524
4
reference_url http://secunia.com/advisories/25205
reference_id
reference_type
scores
url http://secunia.com/advisories/25205
5
reference_url http://secunia.com/advisories/25419
reference_id
reference_type
scores
url http://secunia.com/advisories/25419
6
reference_url http://secunia.com/advisories/25787
reference_id
reference_type
scores
url http://secunia.com/advisories/25787
7
reference_url http://securityreason.com/securityalert/2668
reference_id
reference_type
scores
url http://securityreason.com/securityalert/2668
8
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/34164
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/34164
9
reference_url http://www.debian.org/security/2007/dsa-1298
reference_id
reference_type
scores
url http://www.debian.org/security/2007/dsa-1298
10
reference_url http://www.novell.com/linux/security/advisories/2007_13_sr.html
reference_id
reference_type
scores
url http://www.novell.com/linux/security/advisories/2007_13_sr.html
11
reference_url http://www.securityfocus.com/archive/1/467870/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/467870/100/0/threaded
12
reference_url http://www.securityfocus.com/archive/1/471192/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/471192/100/0/threaded
13
reference_url http://www.securityfocus.com/bid/23862
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/23862
14
reference_url http://www.virtuax.be/?page=library&id=35&type=Exploits
reference_id
reference_type
scores
url http://www.virtuax.be/?page=library&id=35&type=Exploits
15
reference_url http://www.vupen.com/english/advisories/2007/1698
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2007/1698
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=423524
reference_id 423524
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=423524
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2007-2524
reference_id CVE-2007-2524
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2007-2524
19
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/cgi/webapps/29962.txt
reference_id CVE-2007-2524;OSVDB-35821
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/cgi/webapps/29962.txt
20
reference_url https://www.securityfocus.com/bid/23862/info
reference_id CVE-2007-2524;OSVDB-35821
reference_type exploit
scores
url https://www.securityfocus.com/bid/23862/info
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Exploits
0
date_added 2007-05-07
description OTRS 2.0.4 - index.pl Cross-Site Scripting
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2007-05-07
exploit_type webapps
platform cgi
source_date_updated 2013-12-02
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/23862/info
Severity_range_score4.3 - 4.3
Exploitability2.0
Weighted_severity3.9
Risk_score7.8
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-x364-fse4-mfd8