CVE-2007-1989

🗓️ 12 Apr 2007 10:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

Multiple XSS vulnerabilities in DotClear before 1.2.6 allow remote attackers to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 6
ATTACKERKB	CVE-2007-1989	12 Apr 200710:19	–	attackerkb
Cvelist	CVE-2007-1989	12 Apr 200710:00	–	cvelist
EUVD	EUVD-2007-1983	7 Oct 202500:30	–	euvd
NVD	CVE-2007-1989	12 Apr 200710:19	–	nvd
Prion	Cross site scripting	12 Apr 200710:19	–	prion
securityvulns	Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	13 Apr 200700:00	–	securityvulns

NVD

Node

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/33616
dotclear	www.dotclear.net/log/post/2007/04/10/Dotclear-126
securityfocus	www.securityfocus.com/bid/23411
vupen	www.vupen.com/english/advisories/2007/1338
secunia	www.secunia.com/advisories/24829
lists	www.lists.grok.org.uk/pipermail/full-disclosure/2007-April/053720.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/33615
dotclear	www.dotclear.net/forum/viewtopic.php

Parameter	Position	Path	Description	CWE
post_id	query param	ecrire/trackback.php	Cross-site scripting via post_id parameter in trackback handling script.	CWE-79
tool_url	query param	tools/thememng/index.php	Cross-site scripting via tool_url parameter in thememng tool management interface.	CWE-79

16 Jun 2026 22:38Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.02044