Cross-Site Scripting Vulnerability in Fenriru Sleipnir and Grani Software
CVE-2007-6002

Currently unrated

Key Information:

Vendor: Fenrir
Status: Sleipnir; Grani
Vendor: CVE Published:; 15 November 2007

What is CVE-2007-6002?

A cross-site scripting (XSS) vulnerability exists in Fenriru's Sleipnir (versions 2.5.17 R2 and earlier) and Grani (version 3.0 and earlier). This flaw allows remote attackers to inject arbitrary web scripts or HTML through the Search feature when users search for items to add to their Favorites section. This can lead to exposure of sensitive user data and potential compromise of user sessions.

References

http://jvn.jp/jp/JVN%2365427327/index.html

third-party-advisoryx_refsource_JVN

https://exchange.xforce.ibmcloud.com/vulnerabilities/38441

vdb-entryx_refsource_XF

http://osvdb.org/38875

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 15, 2007
Vulnerability Reserved
Nov 15, 2007

CVE-2007-6002 Data

JSON