CVE-2007-1977

CVE-2007-1977

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in index_cms.php in holaCMS 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34685 http://secunia.com/advisories/24656 https://exchange.xforce.ibmcloud.com/vulnerabilities/33392 http://www.majorsecurity.de/index_2.php?major_rls=major_rls37 http://www.securityfocus.com/archive/1/464572/100/200/threaded http://www.securityfocus.com/bid/23288