CVE-2007-2716

Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information.

Link	Resource
http://marc.info/?l=full-disclosure&m=117901012506948&w=2
http://marc.info/?l=full-disclosure&m=117901106013812&w=2
http://www.securityfocus.com/bid/23951
http://secunia.com/advisories/25249	Vendor Advisory
http://osvdb.org/36051
http://osvdb.org/36052
https://exchange.xforce.ibmcloud.com/vulnerabilities/34335

Configuration 1

cpe:2.3:a:eqdkp:eqdkp:1.3_p4:*:*:*:*:*:*:* cpe:2.3:a:eqdkp:eqdkp:1.2.0:*:*:*:*:*:*:* cpe:2.3:a:eqdkp:eqdkp:1.3.1_p1:*:*:*:*:*:*:* cpe:2.3:a:eqdkp:eqdkp:1.1.0:*:*:*:*:*:*:* cpe:2.3:a:eqdkp:eqdkp:*:*:*:*:*:*:*:* cpe:2.3:a:eqdkp:eqdkp:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:eqdkp:eqdkp:1.3.0:*:*:*:*:*:*:*

---

Published : 2007-05-16 07:28

Updated : 2017-07-29 01:31

---

NVD link : CVE-2007-2716

Mitre link : CVE-2007-2716

No products.

NVD-CWE-Other