CVE-2007-2811: XSS

Q: Which versions are affected?

OSK Advance-Flow 4.41 and earlier are affected.

Q: Can this be exploited remotely without authentication?

Yes. The listed vector is network-based and requires no authentication, although exploitation has medium attack complexity.

Q: What is the potential impact?

Successful exploitation can allow injection of arbitrary web script or HTML. The provided impact rating indicates integrity impact, with no listed confidentiality or availability impact.

Published May 22, 2007

Updated

Cross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

1 affected component

OSK Advance-Flow<=4.41

Remediation

Patch Available

http://secunia.com/advisories/25338

Event History

May 22, 2007

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

Which versions are affected?

OSK Advance-Flow 4.41 and earlier are affected.

Can this be exploited remotely without authentication?

Yes. The listed vector is network-based and requires no authentication, although exploitation has medium attack complexity.

What is the potential impact?

Successful exploitation can allow injection of arbitrary web script or HTML. The provided impact rating indicates integrity impact, with no listed confidentiality or availability impact.

What should be done to remediate this issue?

Apply the available patch.

CVE-2007-2811: XSS

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Which versions are affected?

Can this be exploited remotely without authentication?

What is the potential impact?

What should be done to remediate this issue?

Company

Resources

Contact

Frequently Asked Questions

Which versions are affected?

Can this be exploited remotely without authentication?

What is the potential impact?

What should be done to remediate this issue?