CVE-2007-2909: XSS
Published May 30, 2007
·Updated
Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vbcalendar366xssfixplugin.xml update.
Affected Software
1 affected component
Jelsoft vBulletin<=3.6.6
Remediation
Patch Available
Event History
May 30, 2007
CVE Published
10:30 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2909?
CVE-2007-2909 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2007-2909?
To fix CVE-2007-2909, you should update your vBulletin installation to version 3.6.7 or later.
3
What versions of vBulletin are affected by CVE-2007-2909?
CVE-2007-2909 affects vBulletin versions 3.6.x prior to 3.6.7.
4
What type of vulnerability is CVE-2007-2909?
CVE-2007-2909 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject web scripts or HTML.
5
What can attackers achieve by exploiting CVE-2007-2909?
By exploiting CVE-2007-2909, attackers can execute arbitrary web scripts in the context of a vulnerable user's session.