CVE-2007-6597 Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the (1) KW and (2) SF parameters to forum/login_user....
MediumCVSS 4.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the (1) KW and (2) SF parameters to forum/login_user.asp, and (3) the Date parameter to blogs.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iportalx | = beta_1-build032 | No fix listed |
| iportalx | = beta_1-build033_rc | No fix listed |
References
- 39860 vdb-entry
- 39861 vdb-entry
- 28252 third-party-advisory vendor-advisory
- 3504 third-party-advisory
- www.hackerscenter.com
- www.iportalx.net url-repurposed
- 20071227 IPortalX Forums Cross-Site Scripting Vulnerability mailing-list
- 27044 exploit vdb-entry
- iportalx-loginuser-blogs-xss(39249) vdb-entry