CVE-2007-2090

2007-04-1810:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON

Cross-site scripting (XSS) vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

References

secunia.com/advisories/24874

securityreason.com/securityalert/2585

www.securityfocus.com/archive/1/465515/100/0/threaded

www.vupen.com/english/advisories/2007/1374

exchange.xforce.ibmcloud.com/vulnerabilities/33593