CVE-2007-5982 Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sou...
MediumCVSS 4.3
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x7 group x7 chat | = 2.0.4 | No fix listed |
| x7 group x7 chat | = 2.0.5 | No fix listed |
References
- 38745 vdb-entry
- 38746 vdb-entry
- packetstorm.linuxsecurity.com
- 27677 third-party-advisory vendor-advisory
- 26417 exploit vdb-entry