CVE-2007-5806: XSS
Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5806?
CVE-2007-5806 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-5806?
To fix CVE-2007-5806, upgrade to ILIAS version 3.8.4 or later, which addresses the XSS vulnerability.
Who is affected by CVE-2007-5806?
CVE-2007-5806 affects users of ILIAS versions 3.8.3 and earlier.
What kind of attack does CVE-2007-5806 allow?
CVE-2007-5806 allows attackers to execute arbitrary web scripts or HTML via cross-site scripting in specific components.
What components are vulnerable in CVE-2007-5806?
The vulnerable components in CVE-2007-5806 are the mailing and forum functionalities within ILIAS.