CVE-2007-1405: XSS
Published Mar 10, 2007
·Updated
Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected Software
5 affected componentsFixes available
pip/trac<0.10.3.1
0.10.3.1
Edgewall Software Trac=0.10
Edgewall Software Trac=0.10.1
Edgewall Software Trac=0.10.2
Edgewall Software Trac=0.10.3
Remediation
Patch Available
Event History
Mar 10, 2007
CVE Published
10:19 PM
Mar 11, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
May 1, 2022
Advisory Published
via GitHub·05:53 PM
Frequently Asked Questions
1
What is the severity of CVE-2007-1405?
CVE-2007-1405 is considered a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2007-1405?
To fix CVE-2007-1405, upgrade Trac to version 0.10.3.1 or later.
3
Which versions of Trac are affected by CVE-2007-1405?
CVE-2007-1405 affects Trac versions 0.10, 0.10.1, 0.10.2, and 0.10.3.
4
Can CVE-2007-1405 be exploited remotely?
Yes, CVE-2007-1405 can be exploited remotely by attackers through web scripts or HTML injection.
5
What type of vulnerability is CVE-2007-1405?
CVE-2007-1405 is classified as a cross-site scripting (XSS) vulnerability.