CVE-2007-3694 Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getmiro broadcast machine | = 0.9.9.9 | No fix listed |
References
- 3363 third-party-advisory
- www.int21.de
- 20071112 CVE-2007-3694: Cross site scripting (XSS) in broadcast machine mailing-list
- 26407 exploit vdb-entry
- broadcast-machine-login-xss(38418) vdb-entry