CVE-2007-1433 Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to (1) scripts/ad...
MediumCVSS 4.3
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to (1) scripts/addblog_comment.php and (2) detail.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grayscale blog | <= 0.8.0 | No fix listed |
References
- 2417 third-party-advisory
- 20070310 Grayscale <= 0.8.0 Multiple Vulnerabilities mailing-list
- 22911 exploit vdb-entry
- ADV-2007-0916 vdb-entry