Home > Vulnerability Database > CVE-2007-6306

Mend.io Vulnerability Database

CVE-2007-6306

Date: December 11, 2007

Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.

Severity Score

3.7

Related Resources (21)

Url: http://secunia.com/advisories/31493

Url: http://www.rapid7.com/advisories/R7-0031.jsp

Url: http://www.securityfocus.com/bid/26752

Url: http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662

Url: http://osvdb.org/41843

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2007-6306

Url: http://osvdb.org/41844

Url: http://osvdb.org/41845

Url: http://rhn.redhat.com/errata/RHSA-2008-0630.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-6306

Url: http://www.redhat.com/support/errata/RHSA-2008-0151.html

Url: http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680

Url: http://www.securityfocus.com/archive/1/484709/100/0/threaded

Url: http://secunia.com/advisories/27959

Url: http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/38922

Url: http://www.redhat.com/support/errata/RHSA-2008-0213.html

Url: http://securityreason.com/securityalert/3430

Url: http://www.redhat.com/support/errata/RHSA-2008-0158.html

Url: http://www.redhat.com/support/errata/RHSA-2008-0261.html

Url: https://www.mend.io/vulnerability-database/CVE-2007-6306

Severity Score

3.7

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-6306

Date: December 11, 2007

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?