CVE-2007-4831 Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title paramet...
LowCVSS 2.6
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| torrenttrader | = 1.07 | No fix listed |
References
- 37073 vdb-entry
- 26551 third-party-advisory vendor-advisory
- 25616 vdb-entry
- www.telspace.co.za
- torrenttrader-accountsettings-xss(36531) vdb-entry