{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000225.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "NewsGlue and Ikinari Jijyoutsuu are RSS readers. An arbitrary script embedded in RSS feeds could be executed in either of the RSS readers, as they fail to handle the output of RSS information properly.",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000225.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:glue_software:newsglue",
      "@product": "NewsGlue",
      "@vendor": "Glue Software Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sourcenext:ikanari_jijyou",
      "@product": "IKINARI JIJYOU",
      "@vendor": "SOURCENEXT CORPORATION",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.4",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000225",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN64227086/index.html",
      "@id": "JVN#64227086",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1610",
      "@id": "CVE-2007-1610",
      "@source": "CVE"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1611",
      "@id": "CVE-2007-1611",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1610",
      "@id": "CVE-2007-1610",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1611",
      "@id": "CVE-2007-1611",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/24603",
      "@id": "SA24603",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/23094",
      "@id": "23094",
      "@source": "BID"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/33166",
      "@id": "33166",
      "@source": "XF"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2007/1074",
      "@id": "FrSIRT/ADV-2007-1074",
      "@source": "FRSIRT"
    }
  ],
  "title": "NewsGlue and Ikinari Jijyoutsuu arbitrary script execution vulnerability"
}