CVE-2007-6085 Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vigilecms | = 1.4 | No fix listed |
References
- 20071118 VigileCMS 1.4 Multiple Remote Vulnerabilities mailing-list
- 26484 vdb-entry
- vigilecms-message-xss(38556) vdb-entry
- 4632 exploit