CVE-2007-4541

🗓️ 27 Aug 2007 21:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Multiple XSS vulnerabilities in Olate Download (od) 3.4.

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2007-4541	27 Aug 200721:00	–	cvelist
EUVD	EUVD-2007-4524	7 Oct 202500:30	–	euvd
NVD	CVE-2007-4541	27 Aug 200721:17	–	nvd
Prion	Cross site scripting	27 Aug 200721:17	–	prion

NVD

Node

olate olatedownloadMatch3.4.2

Source	Link
securityfocus	www.securityfocus.com/archive/1/477338/100/0/threaded
securityfocus	www.securityfocus.com/archive/1/477337/100/0/threaded
secunia	www.secunia.com/advisories/26565
osvdb	www.osvdb.org/39711
securityfocus	www.securityfocus.com/bid/25412
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/36196
osvdb	www.osvdb.org/39710
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/36197
myimei	www.myimei.com/security/2007-08-22/olate-download-342modulescoreuimphpxss.html
securityreason	www.securityreason.com/securityalert/3076

Parameter	Position	Path	Description	CWE
PHP_SELF	path	modules/core/uim.php	XSS via unsanitized PHP_SELF reflected in uim.php	CWE-352
[url] tags in a comment	nested	modules/core/fldm.php	XSS via [url] tag in a comment in fldm.php	CWE-352

16 Jun 2026 22:44Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.00777

cve-2007-4541 cross-site scripting xss olate download security vulnerabilities remote attack