CVE-2007-3834 Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered thr...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exlibris group aleph | = 3.12 | No fix listed |
References
- escarpment.net
- 26041 third-party-advisory
- 2889 third-party-advisory
- 20070716 ExLibris Aleph and Metalib Cross Site Scripting Attack mailing-list
- 24978 vdb-entry