{"id":"CVE-2007-6461","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-6461","generatedAt":"2026-10-27T18:32:52.345Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function;…","description":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function.","published":"2007-12-20T00:46:00.000Z","lastModified":"2026-06-16T22:48:07.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":["CWE-79"],"affected":["flyspray/flyspray"],"epss":{"score":0.01056,"percentile":0.64208,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.06%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://flyspray.org/fsa:2","source":"cve@mitre.org"},{"url":"http://osvdb.org/39256","source":"cve@mitre.org"},{"url":"http://osvdb.org/39257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28106","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://flyspray.org/fsa:2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28106","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6461","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}