CVE-2007-2819

CVE-2007-2819

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37525 http://pridels-team.blogspot.com/2007/05/track-xss-vuln.html https://exchange.xforce.ibmcloud.com/vulnerabilities/34391 http://www.securityfocus.com/bid/24060