Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2007-5982

EPSS 5.68% · P90
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-5982

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
X7 Chat 多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
X7 Chat 2.0.4, 2.0.5,和可能的其它版本存在多个跨站脚本攻击漏洞,远程攻击者可以借助(1)sources/frame.php的room的参数,(2)help/index.php的theme_c参数, 或(3)upgradev1.php的INSTALL_X7CHATVERSION参数注入任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-5982

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-5982

Please Login to view more intelligence information

Same Patch Batch · n/a · 2007-11-15 · 75 CVEs total

CVE-2007-4688Apple Mac OS X 网络组件访问控制漏洞
CVE-2007-5981Lantronix SCS3200 keyscan 远程拒绝服务漏洞
CVE-2007-4697Apple Mac OS X内存破坏漏洞
CVE-2007-4696Apple Mac OS X WebCore竞争条件漏洞
CVE-2007-4695Apple Mac OS X WebCore未明输入验证漏洞
CVE-2007-4694Apple Mac OS X Safari远程访问控制漏洞
CVE-2007-4693Apple Mac OS X SecurityAgent身份验证绕过漏洞
CVE-2007-4691Apple Mac OS X NSURL访问控制绕过漏洞
CVE-2007-4690Apple Mac OS X NFS组件双重释放漏洞
CVE-2007-4689Apple Mac OS X 网络组件双重释放漏洞
CVE-2006-7229skge Driver Spin_Unlock spin_lock/spin_unlock函数远程拒绝服务漏洞
CVE-2007-4687Apple Mac OS X remote_cmds组件目录遍历漏洞
CVE-2007-4686Apple Mac OS X ttioctl整数溢出漏洞
CVE-2007-4685Apple Mac OS X kernel 本地用户权限提升漏洞
CVE-2007-4684Apple Mac OS X kernel整数溢出多个安全漏洞
CVE-2007-4683Apple Mac OS X kernel目录遍历漏洞
CVE-2007-4682Apple Mac OS X CoreText拒绝服务攻击漏洞
CVE-2007-4681Apple Mac OS X CoreFoundation缓冲区溢出漏洞
CVE-2007-4680Apple Mac OS X 敏感信息泄露漏洞
CVE-2007-4679Apple Mac OS CFNetwork XCFFTP输入验证漏洞

Showing top 20 of 75 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2007-5982

No comments yet


Leave a comment