CVE-2007-2309

2007-04-2621:00:00

mitre

www.cve.org

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

osvdb.org/35759

www.vupen.com/english/advisories/2007/1402