Multiple XSS Vulnerabilities in InterSystems Cache' Sample CSP Scripts
CVE-2007-0437

Currently unrated

Key Information:

Vendor

Intersystems

Status
Cache Database
Vendor
CVE Published:
20 August 2007

What is CVE-2007-0437?

InterSystems Cache' contains multiple cross-site scripting (XSS) vulnerabilities within its sample Cache' Server Page (CSP) scripts. These weaknesses can be exploited by remote attackers to inject arbitrary web scripts or HTML through various parameters such as TO, VALUE, and PAGE in specific CSP sample files. Additionally, authenticated users can also exploit vulnerabilities in certain scripts, enhancing the risk of unauthorized web content injection. This poses a significant threat, as successful exploitation can lead to unauthorized access and data breaches, necessitating immediate attention to secure coding practices and regular security assessments.

References

http://www.mwrinfosecurity.com/news/1658.html
x_refsource_MISC
http://www.mwrinfosecurity.com/advisories/mwri_cache-samp...
x_refsource_MISC
http://www.cpni.gov.uk/Products/alerts/2928.aspx
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.