CVE-2007-2910: XSS
Published May 30, 2007
·Updated
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb367xssfixplugin.xml update, a related issue to CVE-2007-2909.
Affected Software
1 affected component
Jelsoft vBulletin<=3.6.6
Remediation
Patch Available
Event History
May 30, 2007
CVE Published
10:30 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2910?
CVE-2007-2910 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2007-2910?
To fix CVE-2007-2910, upgrade vBulletin to version 3.6.7 PL1 or later.
3
Who is affected by CVE-2007-2910?
CVS-2007-2910 affects all users of vBulletin versions prior to 3.6.7 PL1.
4
What type of vulnerability is CVE-2007-2910?
CVE-2007-2910 is a cross-site scripting (XSS) vulnerability that allows for the injection of malicious scripts.
5
What are the potential impacts of CVE-2007-2910?
The potential impacts of CVE-2007-2910 include unauthorized access to user data and session hijacking.