CVE-2007-2804 in CandyPress Store

Sumário

de MITRE

Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) brand and (2) Msg parameters.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 22/05/2007
• Divulgação: 22/05/2007
• Moderação: aceite
• Entrada: VDB-36926
• CPE: pronto
• CWE: CWE-80 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.01223
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2804
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2804
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2804/