CVE-2007-4146

CVE-2007-4146 describes a cross-site scripting (XSS) vulnerability in the WebEvent product’s webevent.cgi script, affecting versions 2.61 through 4.03. The flaw permits remote attackers to inject arbitrary web script or HTML via the cmd parameter. The description does not specify exploit details ...

WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25148/info WebEvent is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...