CVE-2007-6640 - CVE House
Back to Database
Status published Medium CVE-2007-6640

Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does...

Vulnerability Description

Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6640

Credits & Attribution

No credits recorded in the NVD database.

References

More from sourceforge

View All →
CVE-2008-6161
Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before...
Medium 4.3
CVE-2008-2503
Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has...
Critical 9.3
CVE-2008-2298
Admin.php in Web Slider 0.6 allows remote attackers to bypass...
High 7.5
CVE-2008-0501
Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to...
Medium 5.8
CVE-2007-1572
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1...
Medium 6.8

Affected Vendor

sourceforge

View all reports →

Affected Software

creammonkey, greasekit
Vulnerable Versions:
0.9, 1.0, 1.1, 1.2, 1.3

Timeline

Official Publish: January 4th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.