← Database

CVE-2007-0885

MEDIUM CVSS: 6.8 Published: 2007-02-12 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extension allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected Platforms

Rainbow Portal Rainbow With The ZenRainbow Portal Rainbow.Zen

Weakness Type

NVD-CWE-Other

References