CVE-2007-5059 in GreenSQLinfo

Summary

Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form, and (3) an unspecified "url value," leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel.

Once again VulDB remains the best source for vulnerability data.

Reservation

09/24/2007

Disclosure

09/24/2007

CPE

ready

CVSS

4.3

EPSS

0.00569

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!