CVE-2007-6633
Last modified
CVE-2007-6633 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified parameters to the (2) add categories, (3) edit categories, (4) delete categories, (5) add faq, (6) edit faq, and (7) delete faq Admin scripts.. EPSS estimates a 1.73% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified parameters to the (2) add categories, (3) edit categories, (4) delete categories, (5) add faq, (6) edit faq, and (7) delete faq Admin scripts.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netbizcity | Faqmasterflexplus | All versions |
References
- http://secunia.com/advisories/28248Vendor Advisory
- http://secunia.com/advisories/28248Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-6633?
How severe is CVE-2007-6633?
How do I fix CVE-2007-6633?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-6627Integer overflow in the RTSP_remove_msg function in RTSP_low…
- CVE-2007-6628LScube Feng 0.1.15 and earlier allows remote attackers to ca…
- CVE-2007-6629Interpretation conflict in LScube Feng 0.1.15 and earlier al…
- CVE-2007-6630The Url_init function in utils/url.c in Netembryo 0.0.4, whe…
- CVE-2007-6631Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and …
- CVE-2007-6632showCode.php in xml2owl 0.1.1 allows remote attackers to exe…
- CVE-2007-6634Multiple SQL injection vulnerabilities in FAQMasterFlexPlus,…
- CVE-2007-6635FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin pa…
- CVE-2007-6636Unspecified vulnerability in the StorageFarabDb module in Bi…
- CVE-2007-6637Multiple cross-site scripting (XSS) vulnerabilities in Adobe…
- CVE-2007-6638March Networks DVR 3204 stores sensitive information under t…
- CVE-2007-6639SQL injection vulnerability in index.php in IPTBB 0.5.4 and …
Are you affected by CVE-2007-6633?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST