Roi Revolution Urchin vulnerabilities
3 known vulnerabilities affecting roi_revolution/urchin.
Total CVEs
3
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2007-5113P4MEDIUMCVSS 5.0PoC≤ 5.7.032007-09-26
CVE-2007-5113 [MEDIUM] CVE-2007-5113: report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive in
report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.
nvd
CVE-2007-5112P4MEDIUMCVSS 4.3PoC≤ 5.7.032007-09-26
CVE-2007-5112 [MEDIUM] CWE-79 CVE-2007-5112: Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.
Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, a different vulnerability than CVE-2007-4713. NOTE: this can be leveraged to capture login credentials in some browsers that support remembered (auto-comp
nvd
CVE-2007-4713P4MEDIUMCVSS 4.3v5.6.00r22007-09-05
CVE-2007-4713 [MEDIUM] CWE-79 CVE-2007-4713: Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote at
Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters.
nvd