CVE-2007-0846 Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter.
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open tibia server cms | = 2.0 | No fix listed |
| open tibia server cms | = 2.1.3 | No fix listed |
| open tibia server cms | = 2.1.4 | No fix listed |
| open tibia server cms | = 2.1.5 | No fix listed |
References
- 33170 vdb-entry
- 24116 third-party-advisory
- 22450 exploit vdb-entry vendor-advisory
- otscms-forum-xss(32324) vdb-entry
- 3283 exploit