CVE-2007-2357 Cross-site scripting (XSS) vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter.
MediumCVSS 6.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sinecms | = 2.3.4 | No fix listed |
References
- 34172 vdb-entry
- 25014 third-party-advisory
- 2649 third-party-advisory
- 20070426 SineCMS mailing-list
- 23682 vdb-entry
- ADV-2007-1559 vdb-entry
- sinecms-result-xss(33919) vdb-entry