CVE-2007-3213

CVE-2007-3213

EPSS 1.2%

Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) mode parameters.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/36384 http://pridels-team.blogspot.com/2007/06/sporum-forum-xss-vuln.html http://secunia.com/advisories/25617 https://exchange.xforce.ibmcloud.com/vulnerabilities/34829 http://www.securityfocus.com/bid/24439 http://www.vupen.com/english/advisories/2007/2147