CVE-2007-2718: XSS
First published: Wed May 16 2007(Updated: )
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | ||
| Communigate Pro | <=5.1.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=full-disclosure&m=117900749209206&w=2
- http://www.communigate.com/CommuniGatePro/History51.html
- http://www.scanit.be/advisory-2007-05-12.html
- http://www.securityfocus.com/bid/23950
- http://www.securitytracker.com/id?1018048
- http://secunia.com/advisories/25250
- http://osvdb.org/36017
- http://www.vupen.com/english/advisories/2007/1795
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34266
Frequently Asked Questions
What is the severity of CVE-2007-2718?
CVE-2007-2718 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2007-2718?
To mitigate CVE-2007-2718, upgrade to Stalker CommuniGate Pro version 5.1.9 or later, where the vulnerability is addressed.
What types of attacks can exploit CVE-2007-2718?
CVE-2007-2718 can be exploited through crafted STYLE tags that allow remote attackers to inject arbitrary scripts.
Which versions of Stalker CommuniGate Pro are affected by CVE-2007-2718?
CVE-2007-2718 affects Stalker CommuniGate Pro versions 5.1.8 and earlier.
Is Internet Explorer specifically mentioned in CVE-2007-2718?
Yes, CVE-2007-2718 specifically highlights that the vulnerability occurs when using Microsoft Internet Explorer.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/remedy
- agent/weakness
- agent/references
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/internet explorer
- vendor/stalker
- canonical/communigate pro
- version/communigate pro/5.1.8