CVE-2007-1872

CVE-2007-1872 concerns a cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3. The issue allows remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search id. The NVD entry lists a MEDIUM base severity (CVSS2: AV:N/AC:M/Au:N/C:N/I:P/A:N, 4.3 overall) w...

CVE-2007-1872.txt

Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be...

CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3

Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ https://vulners.com/cve/CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...