CVE-2007-0119

EPSS 2.1%

Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/29396unverified exploitdbwww.exploit-db.com/exploits/29395unverified exploitdbwww.exploit-db.com/exploits/29394unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33390 http://osvdb.org/33391 http://osvdb.org/33392 http://secunia.com/advisories/7950 http://www.securityfocus.com/archive/1/456055/100/0/threaded http://www.securityfocus.com/bid/21891