CVE-2007-4587
Last modified
CVE-2007-4587 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the setting of option.nopage.create in tuigwaa.properties.. EPSS estimates a 1.29% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the setting of option.nopage.create in tuigwaa.properties.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| The Seasar Foundation | Escafeweb | <= 1.0.4 |
References
- http://secunia.com/advisories/26577Patch, Vendor Advisory
- http://www.securityfocus.com/bid/25447Exploit, Patch
- http://secunia.com/advisories/26577Patch, Vendor Advisory
- http://www.securityfocus.com/bid/25447Exploit, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4587?
How severe is CVE-2007-4587?
How do I fix CVE-2007-4587?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4581SQL injection vulnerability in acrotxt.php in WBB2-Addon: Ac…
- CVE-2007-4582Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 Ac…
- CVE-2007-4583Multiple absolute path traversal vulnerabilities in the nvUt…
- CVE-2007-4584Stack-based buffer overflow in BitchX 1.1 Final allows remot…
- CVE-2007-4585Directory traversal vulnerability in activateuser.php in 253…
- CVE-2007-4586Multiple buffer overflows in php_iisfunc.dll in the iisfunc …
- CVE-2007-4588Multiple cross-site scripting (XSS) vulnerabilities in Inter…
- CVE-2007-4589Multiple cross-site scripting (XSS) vulnerabilities in Inter…
- CVE-2007-4590The get_system_info command in Ignite-UX C.7.0 through C.7.3…
- CVE-2007-4591vstor-ws60.sys in VMWare Workstation 6.0 allows local users …
- CVE-2007-4592Multiple cross-site scripting (XSS) vulnerabilities in the w…
- CVE-2007-4593Unspecified vulnerability in vstor2-ws60.sys in VMWare Works…
Are you affected by CVE-2007-4587?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST