CVE-2007-0308

N/A

Published: January 18, 2007 at 12:00 AM UTC

Updated: June 16, 2026 at 10:35 PM UTC

1 product affected across 1 vendorWebgui

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Webgui · Plain Black

95%

6.3.0 6.4.0 6.5.0 6.5.1 6.5.2 6.5.3 6.5.4 6.5.5 6.5.6 6.6.0 6.6.1 6.6.2 6.6.3 6.6.4 6.6.5 6.7.0 6.7.1 6.7.2 6.7.3 6.7.4 6.7.5 6.7.6 6.8.1 6.8.2 6.8.3 6.8.4 6.8.5 6.8.6 7.2.3

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (4)

VDB Entryx_refsource_OSVDB

Source: [email protected]

http://osvdb.org/32813

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/23718

x_refsource_CONFIRMPatch

Source: [email protected]

http://www.plainblack.com/getwebgui/advisories/webgui-7_3_4-beta-released#BUeIjcWiQasypsJxD-YwgQ

VDB Entryx_refsource_BIDPatch

Source: [email protected]

http://www.securityfocus.com/bid/22051

CVSS

6.8MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card