CVE-2007-5088

CVE-2007-5088

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in search/cust_bill_event.cgi in Freeside 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the failed parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37274 http://pridels-team.blogspot.com/2007/09/freeside-xss-vuln.html http://secunia.com/advisories/26963 https://exchange.xforce.ibmcloud.com/vulnerabilities/36764 http://www.securityfocus.com/bid/25811