CVE-2007-5161 Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web script or HTML via an item in a feed, as demonstrated by a WordP...
MediumCVSS 4.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web script or HTML via an item in a feed, as demonstrated by a WordPress blog update. NOTE: this was originally reported as XSS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| i-systems inc feedreader | = 3.10 | No fix listed |
References
- 20070930 Re: [Full-disclosure] feedreader3 has XSS vulnerability mailing-list
- 37409 vdb-entry
- 26996 third-party-advisory
- 3183 third-party-advisory
- 20070928 feedreader3 has XSS vulnerability mailing-list
- 20070930 RE: feedreader3 has XSS vulnerability mailing-list
- 25849 vdb-entry
- ADV-2007-3316 vdb-entry
- feedreader3-rssfeed-xss(36863) vdb-entry