CVE-2007-4083 Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ para...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ parameter to register.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alstrasoft askme pro | All versions | No fix listed |
References
- lostmon.blogspot.com exploit
- 37092 vdb-entry
- 37093 vdb-entry