CVE-2007-5692

Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to...

4.3 MediumPublic exploit

Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to integrator.php; (2) the token parameter in a New Password action, (3) the nid_acl parameter in a Folder Properties action, or (4) the uid parameter in a Modify User action to command.php; or (5) the target parameter to index.php, different vectors than CVE-2006-3320.

Exploit likelihood

4.77%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2007-5692
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-5692
Updated: 2026-11-02

EUVDEUVD-2007-5664 No score

Record: EUVD-2007-5664
Updated: 2026-11-03

GitHub AdvisoriesGHSA-72hv-673g-m6mv No score

Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to...

Record: GHSA-72hv-673g-m6mv
Weakness: CWE-79
Updated: 2026-11-02

Affected products

sitebar

Affected packages

Affected packages
Package	Affected	Fixed
`sitebar` Debian:4.0 From an advisory covering 6 CVEs	before 3.3.8-7etch1, plus listed versions 3.3.8-7	3.3.8-7etch1
`sitebar` Debian:3.1 From an advisory covering 6 CVEs	before 3.2.6-7.1sarge1, plus listed versions 3.2.6-73.2.6-7.1	3.2.6-7.1sarge1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	SiteBar 3.3.8 - 'integrator.php?lang' Cross-Site Scripting	2007-10-18
Exploit-DB	SiteBar 3.3.8 - 'index.php?target' Cross-Site Scripting	2007-10-18
Exploit-DB	SiteBar 3.3.8 - 'command.php?Modify User Action uid' Cross-Site Scripting	2007-10-18

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5692 is a medium vulnerability (CVSS 4.3) in Sitebar, published October 29, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.77%, the 91st percentile. No source names a fixed version.

References

Show 10 moreShow less