CVE-2007-4146

CVE-2007-4146 describes a cross-site scripting (XSS) vulnerability in the WebEvent product’s webevent.cgi script, affecting versions 2.61 through 4.03. The flaw permits remote attackers to inject arbitrary web script or HTML via the cmd parameter. The description does not specify exploit details ...

CVE-2007-4146: Undefined Security Weakness

Cross-site scripting XSS vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25148/info WebEvent is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...