CVE-2007-3596 inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter, which has unknown impact and remote attack vectors, probably cross-site scripting (XSS).
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter, which has unknown impact and remote attack vectors, probably cross-site scripting (XSS).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| izzysoft phpvideopro | <= 0.8.7 | No fix listed |
References
- 36349 vdb-entry
- phpvideopro.cvs.sourceforge.net
- 25815 third-party-advisory vendor-advisory
- sourceforge.net
- www.qumran.org
- 24644 patch vdb-entry
- phpvideopro-sessid-xss(35120) vdb-entry