{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-12-23T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via (1) the newconfname parameter to profiles.php or (2) the conf parameter to index.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "39793", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39793"}, {"name": "28263", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28263"}, {"name": "3496", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3496"}, {"name": "logaholic-profiles-xss(39223)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39223"}, {"name": "39792", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39792"}, {"name": "27003", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27003"}, {"name": "20071223 Logaholic Web Analytics Software", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/485480/100/0/threaded"}, {"name": "20080326 Re: Logaholic Web Analytics Software", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/490101/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-6560", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via (1) the newconfname parameter to profiles.php or (2) the conf parameter to index.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "39793", "refsource": "OSVDB", "url": "http://osvdb.org/39793"}, {"name": "28263", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28263"}, {"name": "3496", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3496"}, {"name": "logaholic-profiles-xss(39223)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39223"}, {"name": "39792", "refsource": "OSVDB", "url": "http://osvdb.org/39792"}, {"name": "27003", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27003"}, {"name": "20071223 Logaholic Web Analytics Software", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/485480/100/0/threaded"}, {"name": "20080326 Re: Logaholic Web Analytics Software", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/490101/100/0/threaded"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-6560", "datePublished": "2007-12-28T00:00:00", "dateReserved": "2007-12-27T00:00:00", "dateUpdated": "2018-10-15T20:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:logaholic:logaholic:0:*:*:*:*:*:*:*", "matchCriteriaId": "B1B96490-D3B6-4E1E-92CD-A7B2279929C8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via (1) the newconfname parameter to profiles.php or (2) the conf parameter to index.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Logaholic permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s del par\u00e1metro (1) newconfname de profiles.php o el par\u00e1metro (2) conf de index.php."}], "id": "CVE-2007-6560", "lastModified": "2018-10-15T21:55:12.633", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-12-28T00:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/39792"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/39793"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/28263"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3496"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/485480/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/490101/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/27003"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39223"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}