CVE-2007-3269
Last modified
CVE-2007-3269 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in a GET request or (2) the Title field of a visitor comment, and (3) allow remote authenticated users to inject arbitrary web script or HTML via a message to another user. NOTE: vector (2) might overlap CVE-2006-3571.1.. EPSS estimates a 1.81% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in a GET request or (2) the Title field of a visitor comment, and (3) allow remote authenticated users to inject arbitrary web script or HTML via a message to another user. NOTE: vector (2) might overlap CVE-2006-3571.1.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Papoo | Papoo Cms Light | <= 3.6 |
References
- http://www.securityfocus.com/bid/24494Exploit, Patch
- http://www.securityfocus.com/bid/24494Exploit, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3269?
How severe is CVE-2007-3269?
How do I fix CVE-2007-3269?
Are you affected by CVE-2007-3269?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
