« Volver al listado

CVE-2007-0509

Estado: ModificadaAlta (9.3)—

Múltiples vulnerabilidades no especificadas en MaklerPlus versiones anteriores a 1.2, tienen impacto desconocido y vectores de ataque, posiblemente referidos a secuencias de comandos en sitios cruzados (XSS) en el parámetro slogan en main.tpl, o agujeros de información en mensajes de error.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Maklerplus — Maklerplus

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0509",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-26T00:28:00.000",
  "references": [
    {
      "url": "http://osvdb.org/32950",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23864",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=479940",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22206",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0321",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31734",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/32950",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23864",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=479940",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22206",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0321",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31734",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in MaklerPlus before 1.2 have unknown impact and attack vectors, possibly relating to cross-site scripting (XSS) in the slogan parameter in main.tpl, or information leaks in error messages."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas en MaklerPlus versiones anteriores a 1.2, tienen impacto desconocido y vectores de ataque, posiblemente referidos a secuencias de comandos en sitios cruzados (XSS) en el parámetro slogan en main.tpl, o agujeros de información en mensajes de error."
    }
  ],
  "lastModified": "2026-06-16T22:35:43.220",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:maklerplus:maklerplus:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE4694C9-720B-464E-9318-62BA89C0297D"
            },
            {
              "criteria": "cpe:2.3:a:maklerplus:maklerplus:1.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF311A93-013C-4E0B-8715-B626CF5A33AC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}