CVE-2007-3653

{"id": "CVE-2007-3653", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-07-09T00:41:00.000", "references": [{"url": "http://descriptions.securescout.com/tc/17973", "source": "cve@mitre.org"}, {"url": "http://www.netvigilance.com/advisory0043", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43502", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de Secuencias de Comandos en Sitios Cruzados (XSS) en Farsi Script (tambi\u00e9n conocido como FaScript) FaName 1.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante un par\u00e1metro (1) key o (2) desc en index.php, o (3) el par\u00e1metro name en page.php."}], "lastModified": "2017-07-29T01:32:27.440", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFFF8451-6F54-4A58-A981-1A1EF4971D6E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}