CVE-2007-4297 - CVE Reference - Advisories

CVE Reference: CVE-2007-4297

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4297

Description: Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the (1) yazan, (2) mail, and (3) yorum parameters. NOTE: some of these details are obtained from third party information.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35911 SAID Secunia Advisory: SA26380 MISC http://www.packetstormsecurity.org/0708-exploits/dersimiz-xss.txt BID 25250

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Joomla Community Builder Component File Inclusion

2.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

3.	dotProject SQL Injection and Cross-Site Scripting

4.	Novell eDirectory Multiple Vulnerabilities

5.	Slackware update for amarok

6.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

7.	Caudium "configvar" Insecure Temporary Files

8.	phpMyRealty "price_max" SQL Injection Vulnerability

9.	GpsDrive "geo-code" Insecure Temporary Files

10.	Adium MSN SLP Message Integer Overflow Vulnerabilities