Unscored severity · published Jan 30, 2007
CVE-2007-0583
Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HC
Http Commander · Http Commander
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0583
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0583
osvdb.org
http://osvdb.org/32985
osvdb.org
http://osvdb.org/32986
Vendor Advisory
http://secunia.com/advisories/23964
www.securityfocus.com
http://www.securityfocus.com/bid/22298
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31877
More from Http Commander
–
CVE-2003-1166
Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a