CVE-2007-3189

Published: Jun 12, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter.

Affected (1)

Products: Jffnms: Just For Fun Network Management System

Jffnms

1 product

Just For Fun Network Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jffnms Just For Fun Network Management System	Version 0.8.3

References (12)

http://marc.info/?l=full-disclosure&m=118151087109711&w=2

Source: cve@mitre.org

http://secunia.com/advisories/25587

Source: cve@mitre.org

http://secunia.com/advisories/26769

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1374

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/471039/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24414

Source: cve@mitre.org

http://marc.info/?l=full-disclosure&m=118151087109711&w=2