CVE-2007-2740 Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.

MediumCVSS 6.8 EPSS 1.0%

Published: 2007-05-17 22:00
Updated: 2026-08-04 09:02
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.

Affected products

Product	Affected versions	Fixed in
xajax	<= 0.2.4	No fix listed
debian/php-xajax(Debian:11)	< 0.2.5-1	0.2.5-1

References

36175 vdb-entry
25299 patch third-party-advisory vendor-advisory
sourceforge.net patch
ADV-2007-1841 vdb-entry
aajax-unspecified(34497) vdb-entry
security-tracker.debian.org vendor-advisory

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.03% (percentile 64.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.