CVE		CVE-2007-0696
Статус		Candidate
Описание		Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611.
Важность		Medium
CVSS score		5,6
CVSS vector		(AV:R/AC:H/Au:NR/C:P/I:P/A:P/B:N)
Phase		Assigned (03.02.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-0696
References		CONFIRM : http://sourceforge.net/project/shownotes.php?relea...
		FRSIRT : ADV-2007-0454
		XF : flip-triggererrortext-xss(31900)
SecurityVulns:		Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )