CVE-2007-0144 Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum paramet...
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digitizing quote and ordering system | = 1.0 | No fix listed |
References
- 31690 vdb-entry
- 23652 third-party-advisory vendor-advisory
- qos-search-xss(31321) vdb-entry
- 3089 exploit