Search
Find a vulnerability
Search criteria
2 vulnerabilities found for wizz_rss_reader by wizz_computers
CVE-2007-2060 (GCVE-0-2007-2060)
Vulnerability from nvd – Published: 2007-04-18 02:20 – Updated: 2024-08-07 13:23
VLAI
EPSS
VEX
Summary
Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2007/1425 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/23523 | vdb-entryx_refsource_BID |
| http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T | x_refsource_CONFIRM |
| http://secunia.com/advisories/24913 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/319464 | third-party-advisoryx_refsource_CERT-VN |
| http://osvdb.org/34534 | vdb-entryx_refsource_OSVDB |
| https://addons.mozilla.org/en-US/firefox/addon/424 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://wizzrss.blat.co.za/2009/11/17/so-much-for-… | x_refsource_MISC |
Date Public
2007-04-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:23:50.423Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2007-1425",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1425"
},
{
"name": "23523",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/23523"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T"
},
{
"name": "24913",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24913"
},
{
"name": "VU#319464",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/319464"
},
{
"name": "34534",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34534"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://addons.mozilla.org/en-US/firefox/addon/424"
},
{
"name": "firefox-wizz-rssfeed-xss(33693)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33693"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-04-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2007-1425",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1425"
},
{
"name": "23523",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/23523"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T"
},
{
"name": "24913",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24913"
},
{
"name": "VU#319464",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/319464"
},
{
"name": "34534",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34534"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://addons.mozilla.org/en-US/firefox/addon/424"
},
{
"name": "firefox-wizz-rssfeed-xss(33693)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33693"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-2060",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2007-1425",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1425"
},
{
"name": "23523",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/23523"
},
{
"name": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T"
},
{
"name": "24913",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24913"
},
{
"name": "VU#319464",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/319464"
},
{
"name": "34534",
"refsource": "OSVDB",
"url": "http://osvdb.org/34534"
},
{
"name": "https://addons.mozilla.org/en-US/firefox/addon/424",
"refsource": "CONFIRM",
"url": "https://addons.mozilla.org/en-US/firefox/addon/424"
},
{
"name": "firefox-wizz-rssfeed-xss(33693)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33693"
},
{
"name": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/",
"refsource": "MISC",
"url": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-2060",
"datePublished": "2007-04-18T02:20:00.000Z",
"dateReserved": "2007-04-17T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:23:50.423Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-2060 (GCVE-0-2007-2060)
Vulnerability from cvelistv5 – Published: 2007-04-18 02:20 – Updated: 2024-08-07 13:23
VLAI
EPSS
VEX
Summary
Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2007/1425 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/23523 | vdb-entryx_refsource_BID |
| http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T | x_refsource_CONFIRM |
| http://secunia.com/advisories/24913 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/319464 | third-party-advisoryx_refsource_CERT-VN |
| http://osvdb.org/34534 | vdb-entryx_refsource_OSVDB |
| https://addons.mozilla.org/en-US/firefox/addon/424 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://wizzrss.blat.co.za/2009/11/17/so-much-for-… | x_refsource_MISC |
Date Public
2007-04-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:23:50.423Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2007-1425",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1425"
},
{
"name": "23523",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/23523"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T"
},
{
"name": "24913",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24913"
},
{
"name": "VU#319464",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/319464"
},
{
"name": "34534",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34534"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://addons.mozilla.org/en-US/firefox/addon/424"
},
{
"name": "firefox-wizz-rssfeed-xss(33693)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33693"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-04-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2007-1425",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1425"
},
{
"name": "23523",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/23523"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T"
},
{
"name": "24913",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24913"
},
{
"name": "VU#319464",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/319464"
},
{
"name": "34534",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34534"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://addons.mozilla.org/en-US/firefox/addon/424"
},
{
"name": "firefox-wizz-rssfeed-xss(33693)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33693"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-2060",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2007-1425",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1425"
},
{
"name": "23523",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/23523"
},
{
"name": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T"
},
{
"name": "24913",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24913"
},
{
"name": "VU#319464",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/319464"
},
{
"name": "34534",
"refsource": "OSVDB",
"url": "http://osvdb.org/34534"
},
{
"name": "https://addons.mozilla.org/en-US/firefox/addon/424",
"refsource": "CONFIRM",
"url": "https://addons.mozilla.org/en-US/firefox/addon/424"
},
{
"name": "firefox-wizz-rssfeed-xss(33693)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33693"
},
{
"name": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/",
"refsource": "MISC",
"url": "http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-2060",
"datePublished": "2007-04-18T02:20:00.000Z",
"dateReserved": "2007-04-17T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:23:50.423Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}