CVE-2007-5312 Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the (1) color parameter to pjirc/css.php and the (2) cat param...
MediumCVSS 4.3
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the (1) color parameter to pjirc/css.php and the (2) cat parameter to browse.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| torrenttrader | = 1.07 | No fix listed |
References
- 37653 vdb-entry
- 37654 vdb-entry
- 27109 third-party-advisory vendor-advisory
- 3207 third-party-advisory
- 20071008 TorrentTrader Classic Mutiple Remote vulnerabilities mailing-list
- 25962 vdb-entry
- ADV-2007-3451 vdb-entry
- torrenttrader-css-browse-xss(37005) vdb-entry
- 4500 exploit