CVE-2007-3189 Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter.
MediumCVSS 4.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jffnms just for fun network management system | = 0.8.3 | No fix listed |
References
- 20070610 Serious holes affecting JFFNMS mailing-list
- 25587 third-party-advisory
- 26769 third-party-advisory
- DSA-1374 vendor-advisory
- 20070610 Serious holes affecting JFFNMS mailing-list
- 24414 vdb-entry