CVE-2007-5993 Cross-site scripting (XSS) vulnerability in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway before 48.1.1 allows remote attackers to inject arbitrary web script or HTML via the searc...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway before 48.1.1 allows remote attackers to inject arbitrary web script or HTML via the searchtype parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vtls.web.gateway | <= 48.1 | No fix listed |
References
- 38708 vdb-entry
- 27661 third-party-advisory vendor-advisory
- 3369 third-party-advisory
- 20071113 [ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS mailing-list
- 26419 vdb-entry
- vtls-webgateway-xss(38444) vdb-entry