CVE-2007-5692

Publication date 29 October 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to integrator.php; (2) the token parameter in a New Password action, (3) the nid_acl parameter in a Folder Properties action, or (4) the uid parameter in a Modify User action to command.php; or (5) the target parameter to index.php, different vectors than CVE-2006-3320.

Status

Package Ubuntu Release Status
sitebar 9.10 karmic
Fixed 3.3.8-12.1
9.04 jaunty
Fixed 3.3.8-12.1
8.10 intrepid
Fixed 3.3.8-12.1
8.04 LTS hardy
Fixed 3.3.8-12.1
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life