CVE-2007-0302 Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Use...
MediumCVSS 6.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Username and (3) Update parameters to (b) Members1.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| instantasp | = 4.1.0 | No fix listed |
References
- 32852 vdb-entry
- 32853 vdb-entry
- 23787 third-party-advisory
- 2164 third-party-advisory
- 20070115 InstantForum.NET Multiple Cross-Site Scripting Vulnerability mailing-list
- 22052 vdb-entry
- ADV-2007-0227 vdb-entry
- instantforum-multiple-scripts-xss(31521) vdb-entry