CVE-2007-5052 Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title par...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title parameter or (2) a "title=" sequence in the PATH_INFO, or a request to the download module with (3) the cat parameter or (4) a "cat=" sequence in the PATH_INFO.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itcms vigile cms | = 1.8 | No fix listed |
References
- 26913 third-party-advisory
- 3162 third-party-advisory
- 20070920 Vigile CMS v1.8 Multiple Remote XSS Vulnerability mailing-list
- 25752 vdb-entry
- cmsvigile-index-xss(36712) vdb-entry