« Volver al listado

CVE-2007-0137

Estado: ModificadaMedia (6.8)—

Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and (2) sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Serendipitynz — Serene BachSerendipitynz — Serene Bach SB

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0137",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-09T11:28:00.000",
  "references": [
    {
      "url": "http://jvn.jp/jp/JVN%2365500885/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/32580",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23623",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017470",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://serenebach.net/log/sb119R.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://serenebach.net/log/sb209R.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21884",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0065",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31302",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2365500885/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/32580",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23623",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017470",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://serenebach.net/log/sb119R.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://serenebach.net/log/sb209R.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21884",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0065",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31302",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and (2) sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SimpleBoxes/SerendipityNZ Serene Bach 2.05R y versiones anteriores, y 2.08D y versiones anteriores en la series 2.08; y (2) sb 1.13D y versiones anteriores, y 1.18R y versiones anteriores en las series 1.18; permite a atacantes remotos inyectar scripts web o HTML de su elección mediante vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T22:34:59.227",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:serendipitynz:serene_bach:1.18r:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7962E28-D16E-488F-AA38-A3D0193D0493"
            },
            {
              "criteria": "cpe:2.3:a:serendipitynz:serene_bach:2.05r:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79A67B19-F6CB-4451-A1E2-D8E95E752181"
            },
            {
              "criteria": "cpe:2.3:a:serendipitynz:serene_bach:2.08d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B136BFFA-B2A6-4658-8778-AA74686BF652"
            },
            {
              "criteria": "cpe:2.3:a:serendipitynz:serene_bach_sb:1.13d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7840D5F6-3E24-48B0-9D44-151886B26250"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}