CVE-2007-4079 Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) q parameter to (...
MediumCVSS 4.3
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) q parameter to (a) admin/membersearch.php, or (3) the userid parameter to (b) admin/edituser.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alstrasoft sms text messaging enterprise | All versions | No fix listed |
References
- lostmon.blogspot.com
- 37867 vdb-entry
- 37868 vdb-entry
- 25022 exploit vdb-entry