CVE-2007-5426 Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, a...
MediumCVSS 4.3
EPSS 1.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interspire activekb nx | = 2.5.4 | No fix listed |
References
- 37661 vdb-entry
- 27194 third-party-advisory
- 3216 third-party-advisory
- securityvulns.ru exploit
- 20071010 Vulnerabilities digest mailing-list
- 26027 vdb-entry
- activekbnx-page-xss(37066) vdb-entry