Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-0896

EPSS 9.85% · P93
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-0896

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS feed, a different vulnerability than CVE-2006-4712.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Firefox多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
(1)Sage 1.3.10版本之前的版本以及(2)Firefox的Sage++扩展名中存在跨站脚本攻击漏洞。远程攻击者可以借助RSS输入端中的一个"<SCRIPT/='SRC='"序列，注入任意web脚本或HTML。该漏洞不同于CVE-2006-4712。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-0896

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-0896

Please Login to view more intelligence information

Same Patch Batch · n/a · 2007-02-13 · 29 CVEs total

CVE-2006-3448Microsoft Windows分步交互式训练缓冲区溢出漏洞
CVE-2007-0895Solaris 竞争条件权限管理和访问控制漏洞
CVE-2007-0842Microsoft Visual C++标准库时间函数拒绝服务漏洞
CVE-2007-0904LightRO CMS 'projects.php'SQL注入漏洞
CVE-2007-0903EJabberD Mod_Roster_ODBC 未明漏洞
CVE-2007-0902MoinMoin "展示调试信息"特征未明信息泄露漏洞
CVE-2007-0901MoinMoin Info页多个跨站脚本攻击漏洞
CVE-2007-0900TagIt! Tagboard 多个PHP远程文件包含漏洞
CVE-2007-0214Microsoft HTML帮助ActiveX控件远程代码执行漏洞(MS07-008)
CVE-2007-0211Microsoft Windows Shell硬件检测服务权限提升漏洞(MS07-006)
CVE-2007-0210Microsoft Windows图像捕获服务本地权限提升漏洞(MS07-007)
CVE-2007-0026Microsoft Windows OLE Dialog内存破坏漏洞(MS07-011)
CVE-2007-0025Microsoft Windows MFC组件OLE对象缓冲区溢出漏洞
CVE-2006-5270Microsoft恶意软件保护引擎整数溢出漏洞(MS07-010)
CVE-2007-0219Microsoft Internet Explorer 安全漏洞
CVE-2006-1311Microsoft Office和Windows RichEdit组件内存破坏漏洞(MS07-013)
CVE-2007-0209Microsoft Word畸形绘图对象任意代码执行漏洞(MS07-014)
CVE-2007-0208Microsoft Word宏权限绕过任意代码执行漏洞(MS07-014)
CVE-2007-0217Microsoft Internet Explorer 安全漏洞
CVE-2006-4697Microsoft Internet Explorer 安全漏洞

Showing top 20 of 29 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-0896

No comments yet

Leave a comment