{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-18T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "JVN#95249468", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/jp/JVN%2395249468/index.html"}, {"name": "ADV-2007-0241", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0241"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://manual.freshreader.com/archives/2007/01/20070118_javasc.html"}, {"name": "23806", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23806"}, {"name": "22106", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22106"}, {"name": "freshreader-rssfeed-xss(31566)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31566"}, {"name": "32923", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/32923"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0362", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "JVN#95249468", "refsource": "JVN", "url": "http://jvn.jp/jp/JVN%2395249468/index.html"}, {"name": "ADV-2007-0241", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0241"}, {"name": "http://manual.freshreader.com/archives/2007/01/20070118_javasc.html", "refsource": "CONFIRM", "url": "http://manual.freshreader.com/archives/2007/01/20070118_javasc.html"}, {"name": "23806", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23806"}, {"name": "22106", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22106"}, {"name": "freshreader-rssfeed-xss(31566)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31566"}, {"name": "32923", "refsource": "OSVDB", "url": "http://osvdb.org/32923"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:19:29.042Z"}, "title": "CVE Program Container", "references": [{"name": "JVN#95249468", "tags": ["third-party-advisory", "x_refsource_JVN", "x_transferred"], "url": "http://jvn.jp/jp/JVN%2395249468/index.html"}, {"name": "ADV-2007-0241", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0241"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://manual.freshreader.com/archives/2007/01/20070118_javasc.html"}, {"name": "23806", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23806"}, {"name": "22106", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22106"}, {"name": "freshreader-rssfeed-xss(31566)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31566"}, {"name": "32923", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/32923"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0362", "datePublished": "2007-01-19T01:00:00", "dateReserved": "2007-01-18T00:00:00", "dateUpdated": "2024-08-07T12:19:29.042Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:freshreader:freshreader:*:*:*:*:*:*:*:*", "matchCriteriaId": "B209678E-CF1A-479D-AA73-1FB4650EFA6C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente RSS en FreshReader versiones anteriores a 1.0.07010600 permite a atacantes remotos inyectar scripts web o HTML de su elecci\u00f3n mediante vectores desconocidos, posiblemente referidos a atributos de etiqueta."}], "id": "CVE-2007-0362", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-19T01:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://jvn.jp/jp/JVN%2395249468/index.html"}, {"source": "cve@mitre.org", "url": "http://manual.freshreader.com/archives/2007/01/20070118_javasc.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/32923"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23806"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22106"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0241"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31566"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://jvn.jp/jp/JVN%2395249468/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://manual.freshreader.com/archives/2007/01/20070118_javasc.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/32923"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23806"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22106"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0241"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31566"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}