CVE-2007-3396

CVE-2007-3396 is an XSS vulnerability in the KeyFocus (KF) web server 3.1.0, affected code path index.wkf where an attacker can inject arbitrary script/HTML via the opsubmenu parameter. The issue arises from improper handling/validation of the opsubmenu input, enabling script execution in the vic...