Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-0137 Details

Description

Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and (2) sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://jvn.jp/jp/JVN%2365500885/index.html	CVE
http://osvdb.org/32580	CVE
http://secunia.com/advisories/23623	CVE	PatchVendor Advisory
http://securitytracker.com/id?1017470	CVE
http://serenebach.net/log/sb119R.html	CVE
http://serenebach.net/log/sb209R.html	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/31302	CVE
http://www.securityfocus.com/bid/21884	CVE
http://www.vupen.com/english/advisories/2007/0065	CVE
http://jvn.jp/jp/JVN%2365500885/index.html	[email protected]
http://osvdb.org/32580	[email protected]
http://secunia.com/advisories/23623	[email protected]	PatchVendor Advisory
http://securitytracker.com/id?1017470	[email protected]
http://serenebach.net/log/sb119R.html	[email protected]
http://serenebach.net/log/sb209R.html	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/31302	[email protected]
http://www.securityfocus.com/bid/21884	[email protected]
http://www.vupen.com/english/advisories/2007/0065	[email protected]

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
serendipitynz serene bach	1.18r 2.05r 2.08d
CPE cpe:2.3:a:serendipitynz:serene_bach:1.18r:::::::* cpe:2.3:a:serendipitynz:serene_bach:2.05r:::::::* cpe:2.3:a:serendipitynz:serene_bach:2.08d:::::::* Remediation No remediation found in references.
serendipitynz serene bach sb	1.13d
CPE cpe:2.3:a:serendipitynz:serene_bach_sb:1.13d:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Jan 9, 2007	Initial Analysis	[email protected]