« Volver al listado

CVE-2007-0083

Estado: ModificadaMedia (6.8)—

Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwave instead of Nuked Klan.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nuked-klan — Nuked-klan

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0083",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-05T11:28:00.000",
  "references": [
    {
      "url": "http://osvdb.org/33368",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/2101",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/455726/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21850",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/33368",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/2101",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/455726/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21850",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by \"Remote Cookie Disclosure.\"  NOTE: it could be argued that this is an issue in Shockwave instead of Nuked Klan."
    },
    {
      "lang": "es",
      "value": "Vulnerabilida de secuencias de comandos en sitios cruzados (XSS) en Nuked Klan 1.7 y anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de un javascript: URI en una declaración getURL en un archivo .swf, como se demostró por \"Acceso alejado de la cookie\". NOTA: podría discutirse que esto es un asunto de Shockwave en vez de Nuked Klan."
    }
  ],
  "lastModified": "2026-06-16T22:34:52.910",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "528BF5DD-6F61-4752-B9B4-D98DA7DC3575"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.2_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C996587-6713-407B-B834-73C5BD6D52C5"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33599EC7-49CA-4AFC-9DC2-6B7CC9CCA40F"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.3_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F896FAC-3E50-4608-86AC-7A9984219A4C"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF6196D1-613D-43C5-A284-A633567C508B"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE4445F3-266B-4950-A4D2-2BF800B236F9"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.5_sp2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ECB1A5C-EE38-4FB7-BD17-7F45359E5B52"
            },
            {
              "criteria": "cpe:2.3:a:nuked-klan:nuked-klan:1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6318A231-4093-4E7C-B5F6-66B4BF64B33F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}