CVE-2007-4713

Impact

Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/36807
• http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html
• http://secunia.com/advisories/26682
• http://www.securityfocus.com/bid/25530
• http://www.vupen.com/english/advisories/2007/3085
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36401
• http://osvdb.org/36807
• http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html
• http://secunia.com/advisories/26682
• http://www.securityfocus.com/bid/25530
• http://www.vupen.com/english/advisories/2007/3085
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36401