← volver
CVE-2007-2880

CVE-2007-2880

EPSS 1.3%
Multiple cross-site scripting (XSS) vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Room_name parameter to room/info_book.asp or the (2) curYear parameter to room/week.asp.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://osvdb.org/36482http://osvdb.org/36483http://secunia.com/advisories/25422http://securityreason.com/securityalert/2738https://exchange.xforce.ibmcloud.com/vulnerabilities/34511http://www.securityfocus.com/archive/1/469589/100/0/threadedhttp://www.vupen.com/english/advisories/2007/1960