CVE-2007-2804 in CandyPress StoreИнформация

Сводка

по MITRE

Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) brand and (2) Msg parameters.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Резервировать

22.05.2007

Раскрытие

22.05.2007

Модерация

принято

Вход

VDB-36926

EPSS

0.01223

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2007-2804
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2007-2804
CVE Detailshttps://www.cvedetails.com/cve/CVE-2007-2804/

◂ ПредыдущийОбзорДалее ▸

Do you know our Splunk app?

Download it now for free!