CVE-2007-0552

Cross-site scripting (XSS) vulnerability in install/default/error404.html in Oh no! Not another CMS (Onnac) 0.0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the error_url parameter.

• http://onnac.svn.sourceforge.net/viewvc/onnac/trunk/install/default/error404.html?view=logPatch, Vendor Advisory
• http://osvdb.org/36811
• http://sourceforge.net/forum/forum.php?forum_id=655260Vendor Advisory
• http://www.securityfocus.com/bid/22256
• http://www.vupen.com/english/advisories/2007/0347
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31795
• http://onnac.svn.sourceforge.net/viewvc/onnac/trunk/install/default/error404.html?view=logPatch, Vendor Advisory
• http://osvdb.org/36811
• http://sourceforge.net/forum/forum.php?forum_id=655260Vendor Advisory
• http://www.securityfocus.com/bid/22256
• http://www.vupen.com/english/advisories/2007/0347
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31795

Published

Jan 29, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0546Toxiclab Shoutbox 1 stores sensitive information under the w…
• CVE-2007-0547Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFO…
• CVE-2007-0548KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to …
• CVE-2007-0549Cross-site scripting (XSS) vulnerability in list3.php in 212…
• CVE-2007-0550Cross-site scripting (XSS) vulnerability in search.php in 21…
• CVE-2007-0551Multiple PHP remote file inclusion vulnerabilities in cmsimp…
• CVE-2007-0553Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2007-0554SQL injection vulnerability in print.asp in Guo Xu Guos Post…
• CVE-2007-0555PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before …
• CVE-2007-0556The query planner in PostgreSQL before 8.0.11, 8.1 before 8.…
• CVE-2007-0557rMake before 1.0.4 drops root privileges in a way that retai…
• CVE-2007-0558PHP remote file inclusion vulnerability in modules/mail/main…