CVE-2007-6310 Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly....
MediumCVSS 4.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php, and (3) the topic parameter to modules/feed/feed.php (aka modules/feed.php).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| falt4 cms falt4 extreme rc4 | = 10.9.2007 | No fix listed |
References
- 28045 third-party-advisory
- 3436 third-party-advisory
- sourceforge.net
- www.h-labs.org exploit
- 20071210 Falt4 CMS Security Report/Advisory mailing-list
- 26786 exploit patch vdb-entry
- falt4-index-feed-xss(38952) vdb-entry
- 4711 exploit