CVE Feed

    Dashboard / CVE / CVE-2007-0407

    CVE-2007-0407

    Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate "WikiPage titles" issue was also fixed.

    Published:Jan 23, 2007
    Last Modified:Apr 23, 2026
    EPS:Jan 23, 2007
    EPSS Score:0.01631
    CVSS Score:6.8

    Affected Products

    Vendor
    Plain Black
    Product
    Webgui

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2008-2077 (CVSS 10) — Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data …
    CVE-2007-6487 (CVSS 4.9) — Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Se…
    CVE-2007-2746 (CVSS 3.5) — The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not pro…
    CVE-2007-0629 (CVSS 6.4) — The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which al…
    CVE-2007-0308 (CVSS 6.8) — Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to …
    CVE-2006-0680 (CVSS 5) — Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anon…
    CVE-2006-0165 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.…
    CVE-2005-4694 (CVSS 7.5) — Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions bef…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High