CVE-2007-1873 Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search script.
MediumCVSS 4.3
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mephisto | = 0.7.3 | No fix listed |
References
- int21.de
- 34911 vdb-entry
- 24870 third-party-advisory
- 20070411 Cross site scripting in mephisto 0.7.3 mailing-list
- 20070412 Re: Cross site scripting in mephisto 0.7.3 mailing-list
- 23141 vdb-entry
- ADV-2007-1373 vdb-entry
- mephisto-search-function-xss(33484) vdb-entry
- mephisto-search-xss(33620) vdb-entry