CVE-2007-0191

2007-01-1102:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

77.1%

JSON

Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contents_new operation in the ad_contents section.

References

osvdb.org/33399

securityreason.com/securityalert/2138

www.securityfocus.com/archive/1/456042/100/100/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/31304