CVE-2007-1151

2007-02-2718:00:00

mitre

www.cve.org

AI Score

6.2

Confidence

High

EPSS

0.005

Percentile

77.2%

JSON

Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter to the top-level URI, possibly related to a SQL error.

References

osvdb.org/33520

securityreason.com/securityalert/2338

www.securityfocus.com/archive/1/460917/100/0/threaded

www.securityfocus.com/bid/22675

www.vupen.com/english/advisories/2007/0716