CVE-2007-5955

CVE-2007-5955 describes a cross-site scripting (XSS) vulnerability in UPDIR.NET’s updir.php prior to version 2.04, affecting the full‑text search and file upload functions. The JVN entry notes that updir.php allows uploading and publishing files and that an attacker could execute arbitrary script...