Vulnerability Details CVE-2007-6104
Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.9%
CVSS Severity
CVSS v2 Score 4.3
References
- http://jvn.jp/jp/JVN%2355833292/index.html
- http://osvdb.org/38874
- http://secunia.com/advisories/27750
- http://www.securityfocus.com/bid/26515
- http://www.vupen.com/english/advisories/2007/3937
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38600
- http://jvn.jp/jp/JVN%2355833292/index.html
- http://osvdb.org/38874
- http://secunia.com/advisories/27750
- http://www.securityfocus.com/bid/26515
- http://www.vupen.com/english/advisories/2007/3937
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38600
Products affected by CVE-2007-6104
-
cpe:2.3:a:filemaker:filemaker:7.0
-
cpe:2.3:a:filemaker:filemaker:8.0
-
cpe:2.3:a:filemaker:filemaker:8.5
-
cpe:2.3:a:filemaker:filemaker_server:7.0
-
cpe:2.3:a:filemaker:filemaker_server:8.0