CVE-2007-3838
Public Exploits 1
ExploitDB · 1 EDB-30313 [webapps]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-3838
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
TBDev.NET DR HTML注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TBDev.NET DR 11-10-05-BETA-SF1:111005版本及其早期版本的takeprofedit.php中存在跨站脚本攻击漏洞。远程攻击者可以借助avatar参数的一个SCRIPT元件的SRC属性，注入任意web脚本或HTML。注意：该漏洞可能与Janitor信息包的tracker程序相关。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-3838
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-3838
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-3838 (3)
Same Patch Batch · n/a · 2007-07-17 · 39 CVEs total
| CVE-2007-3808 | paFileDB Search.PHP SQL注入漏洞 | |
| CVE-2007-3820 | Opera及Konqueror浏览器data: URI主题地址栏欺骗漏洞 | |
| CVE-2007-3821 | Citadel WebCit 多个输入验证漏洞 | |
| CVE-2007-3822 | Citadel WebCit 多个输入验证漏洞 | |
| CVE-2007-3823 | IPSwitch WS_FT PLogsrv.exe拒绝服务漏洞 | |
| CVE-2007-3824 | MzK Blog katgoster.asp SQL注入漏洞 | |
| CVE-2007-3017 | ActiveWeb Contentserver CMS Client Side 过滤绕过漏洞 | |
| CVE-2007-3018 | activeWeb contentserver 许可绕过错误 | |
| CVE-2007-3806 | PHP Glob()函数远程拒绝服务漏洞 | |
| CVE-2007-3807 | SiteScape Forum 多个未明跨站脚本攻击漏洞 | |
| CVE-2007-3819 | Opera Web Browser Address Bar URI欺骗漏洞 | |
| CVE-2007-3809 | Prozilla Directory Script cat_id参数 SQL注入漏洞 | |
| CVE-2007-3810 | Realtor index.php SQL注入漏洞 | |
| CVE-2007-3811 | eSyndiCat Link Directory 多个SQL注入漏洞 | |
| CVE-2007-3812 | CMScout Forums.PHP SQL注入漏洞 | |
| CVE-2007-3813 | MKPortal NoBoard BETA 文件漏洞 | |
| CVE-2007-3814 | MKPortal 多个SQL注入漏洞 | |
| CVE-2007-3815 | Poslovni informator Republike Slovenije (PIRS) pirs32.exe 缓冲区溢出 | |
| CVE-2007-3816 | RETIRED: Anders Mller JWIG Template 远程拒绝服务漏洞 | |
| CVE-2007-3842 | 8e6 R3000 Enterprise Filter 跨站脚本漏洞 |
Showing top 20 of 39 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-3838
No comments yet