FKIE_CVE-2007-5985

Vulnerability from fkie_nvd - Published: 2007-11-15 00:46 - Updated: 2026-06-16 22:47
Severity
Summary
Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) account.php, (2) moresmiles.php, or (3) recover.php; or (4) the "to" parameter to usercp.php.
References
cve@mitre.orghttp://osvdb.org/38751
cve@mitre.orghttp://osvdb.org/38752
cve@mitre.orghttp://osvdb.org/38753
cve@mitre.orghttp://osvdb.org/38754
cve@mitre.orghttp://osvdb.org/42219
cve@mitre.orghttp://osvdb.org/42220
cve@mitre.orghttp://osvdb.org/42221
cve@mitre.orghttp://osvdb.org/42222
cve@mitre.orghttp://secunia.com/advisories/27550Patch, Vendor Advisory
cve@mitre.orghttp://sourceforge.net/forum/forum.php?forum_id=752472Patch
cve@mitre.orghttp://sourceforge.net/project/shownotes.php?group_id=146822&release_id=552477
cve@mitre.orghttp://sourceforge.net/tracker/index.php?func=detail&aid=1753797&group_id=146822&atid=766508
cve@mitre.orghttp://www.securityfocus.com/bid/26551
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/38413
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/38414
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38751
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38752
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38753
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38754
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/42219
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/42220
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/42221
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/42222
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/27550Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/forum/forum.php?forum_id=752472Patch
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/project/shownotes.php?group_id=146822&release_id=552477
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/tracker/index.php?func=detail&aid=1753797&group_id=146822&atid=766508
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/26551
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/38413
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/38414
Impacted products
Vendor Product Version
bti-tracker bti-tracker *
bti-tracker bti-tracker *
bti-tracker bti-tracker *
bti-tracker bti-tracker *
bti-tracker bti-tracker *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bti-tracker:bti-tracker:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9560BC2B-ABA6-4E3E-BC5F-39FA81A7056B",
              "versionEndIncluding": "1.3.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bti-tracker:bti-tracker:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "976C17BA-0AC3-4CAB-A71F-1C8FF82BDEB3",
              "versionEndIncluding": "1.4.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bti-tracker:bti-tracker:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "345E41A1-5BB7-47EE-9493-0A57FF62BD2A",
              "versionEndIncluding": "1.4.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bti-tracker:bti-tracker:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4FDB846-596B-4149-9B81-34094B60D4DA",
              "versionEndIncluding": "1.4.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bti-tracker:bti-tracker:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD2AAEE7-3AA7-4A94-AEF1-23DE0EC74037",
              "versionEndIncluding": "1.4.4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) account.php, (2) moresmiles.php, or (3) recover.php; or (4) the \"to\" parameter to usercp.php."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en BtiTracker  anterior a 1.4.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de vectores no especificados en (1) account.php, (2) moresmiles.php, o (3) recover.php; o el par\u00e1metro (4)\"to\" en  usercp.php."
    }
  ],
  "id": "CVE-2007-5985",
  "lastModified": "2026-06-16T22:47:12.380",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-11-15T00:46:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38751"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38752"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38753"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38754"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/42219"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/42220"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/42221"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/42222"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27550"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/forum/forum.php?forum_id=752472"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sourceforge.net/project/shownotes.php?group_id=146822\u0026release_id=552477"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1753797\u0026group_id=146822\u0026atid=766508"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/26551"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38413"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38414"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38751"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38752"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38753"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38754"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/42219"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/42220"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/42221"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/42222"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27550"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/forum/forum.php?forum_id=752472"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/project/shownotes.php?group_id=146822\u0026release_id=552477"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1753797\u0026group_id=146822\u0026atid=766508"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/26551"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38413"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38414"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.