CVE-2007-2265 Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpee ya book | = 0.98_alpha | No fix listed |
References
- 35519 vdb-entry
- 2629 third-party-advisory
- 20070424 YA Book 0.98 Persistent XSS mailing-list
- 23626 vdb-entry
- yabook-city-xss(33894) vdb-entry