CVE-2007-3930

Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct…

published July 21, 2007

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19242 · 97.3th percentile
Published
2007-07-21T00:00Z
EPSS history
Timeline
  • 21 JUL 00:00Z
    Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct…
    cvelistv5