CVE-2007-0798 in Ublog Reload

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (2) badword.asp, (3) polls.asp, and (4) users.asp.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 02/06/2007
• Disclosure: 02/06/2007
• Moderation: VulDB entry created
• Entries: 4
• CPE: ready
• CWE: CWE-80 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00847
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0798
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0798
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0798/