CVE-2007-1504

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://jvn.jp/jp/JVN%2383832818/index.htmlThird Party Advisory, VDB Entry
http://osvdb.org/34276Broken Link
http://secunia.com/advisories/24508Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.htmlVendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.htmlVendor Advisory
http://www.securityfocus.com/bid/23020Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0996Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33099VDB Entry
http://jvn.jp/jp/JVN%2383832818/index.htmlThird Party Advisory, VDB Entry
http://osvdb.org/34276Broken Link
http://secunia.com/advisories/24508Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.htmlVendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.htmlVendor Advisory
http://www.securityfocus.com/bid/23020Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0996Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33099VDB Entry

Timeline

Published: Mar 19, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-15052.1Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users CVE-2007-15064.3Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject CVE-2007-15077.5The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might CVE-2007-15084.3Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary web script or HTML via CVE-2007-15094.3Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote attackers to read arbitra CVE-2007-15107.5SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands vi CVE-2007-15117.1Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a CVE-2007-151210.0Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Go CVE-2007-15136.8PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_globals is enabled, a CVE-2007-15146.8PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via CVE-2007-15154.3Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary CVE-2007-15166.8PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP c