CVE-2007-2071
Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition before 20070416 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) pub/modules/d/_top.html; (2) /pub/modules/a/_access.html; (3) _circletop.html or (4) _cir66.html in pub/modules/ci/; or (5) _fri66.html, (6) _inv66.html, (7) _top.html, (8) _friends.html, or (9) _fri33.html in pub/modules/f/.
Key facts
- CVSS score
- 4.3 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N- EPSS score
- 1.7% (77th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-2066)
- Published
- April 18, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-2066 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- open-gorotto / open-gorotto
References
- http://jvn.jp/jp/JVN%2384646028/index.html
- http://osvdb.org/37593
- http://osvdb.org/37594
- http://osvdb.org/37595
- http://osvdb.org/37596
- http://osvdb.org/37597
- http://osvdb.org/37598
- http://osvdb.org/37599
- http://osvdb.org/37600
- http://osvdb.org/37601
- http://release.open-gorotto.jp/
- http://release.open-gorotto.jp/openg_patch_20070416.tar.gz
- http://www.securityfocus.com/bid/23507
- http://www.vupen.com/english/advisories/2007/1398
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain