CVE-2007-0529 Cross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link Directory (phpLD) 3.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via....
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link Directory (phpLD) 3.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted link, which is triggered when the administrator uses the "Validate Links" functionality.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php link directory | <= 3.0.6 | No fix listed |
References
- 32952 vdb-entry
- 20070121 PHP Link Directory XSS Vulnerability version <= 3.0.6 mailing-list
- www.smilehouse.com exploit patch vendor-advisory
- phpld-admin-xss(31662) vdb-entry