CVE-2007-3835

Published: Jul 17, 2007Modified: Apr 23, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Ex Libris MetaLib 3.13 and 4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a resource id that can be discovered through a search.

Affected (2)

Products: Exlibris Group: Metalib

Exlibris Group

1 product

Metalib

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Exlibris Group Metalib	Version 3.13
Exlibris Group Metalib	Version 4

References (16)

http://escarpment.net/exlibris.txt

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064666.html

Source: cve@mitre.org

http://osvdb.org/36877

Source: cve@mitre.org

http://secunia.com/advisories/26162

Source: cve@mitre.org

http://securityreason.com/securityalert/2889

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/473785/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24978

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35431

Source: cve@mitre.org

http://escarpment.net/exlibris.txt