{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-12-12T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2008-11-15T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "28106", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28106"}, {"name": "39256", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39256"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://flyspray.org/fsa:2"}, {"name": "39257", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39257"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-6461", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "28106", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28106"}, {"name": "39256", "refsource": "OSVDB", "url": "http://osvdb.org/39256"}, {"name": "http://flyspray.org/fsa:2", "refsource": "CONFIRM", "url": "http://flyspray.org/fsa:2"}, {"name": "39257", "refsource": "OSVDB", "url": "http://osvdb.org/39257"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T16:11:05.637Z"}, "title": "CVE Program Container", "references": [{"name": "28106", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28106"}, {"name": "39256", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39256"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://flyspray.org/fsa:2"}, {"name": "39257", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39257"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-6461", "datePublished": "2007-12-20T00:00:00", "dateReserved": "2007-12-19T00:00:00", "dateUpdated": "2024-08-07T16:11:05.637Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:flyspray:flyspray:0.9.9:*:*:*:*:*:*:*", "matchCriteriaId": "3A3B6A62-B941-49CC-820B-2E8AF21438EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:flyspray:flyspray:0.9.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "467BEC81-7F89-40DD-8194-45C1978A43DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:flyspray:flyspray:0.9.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "3593A1D6-B4EE-40A3-A807-3BE34290C4F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:flyspray:flyspray:0.9.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "04ABFF20-F663-416B-B3C3-00B12F6FDE99", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en index.php en Flyspray 0.9.9 hasta la 0.9.9.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de (1)la cadena de consulta en un acci\u00f3n index, relacionado con la funci\u00f3n JavaScript savesearch; y (2) el par\u00e1metro details en una acci\u00f3n detalles, relacionado con la etiqueta History y la funci\u00f3n JavaScript getHistory."}], "id": "CVE-2007-6461", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-12-20T00:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://flyspray.org/fsa:2"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/39256"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/39257"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28106"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://flyspray.org/fsa:2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39256"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39257"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28106"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}