CVE-2007-2907 Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the f...
MediumCVSS 4.9
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssl-explorer | <= 0.2.12 | No fix listed |
References
- 36913 vdb-entry
- 36915 vdb-entry
- 25512 third-party-advisory vendor-advisory
- sourceforge.net patch
- 24319 vdb-entry
- ADV-2007-2057 vdb-entry vendor-advisory