CVE-2007-0302

Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Username and (3) Update parameters to (b) Members1.aspx.

Link	Resource
http://www.securityfocus.com/bid/22052
http://secunia.com/advisories/23787
http://securityreason.com/securityalert/2164
http://osvdb.org/32853
http://osvdb.org/32852
http://www.vupen.com/english/advisories/2007/0227
https://exchange.xforce.ibmcloud.com/vulnerabilities/31521
http://www.securityfocus.com/archive/1/456970/100/0/threaded

Configuration 1

cpe:2.3:a:instantasp:instantasp:4.1.0:*:*:*:*:*:*:*

---

Published : 2007-01-18 12:28

Updated : 2018-10-16 04:32

---

NVD link : CVE-2007-0302

Mitre link : CVE-2007-0302

No products.

NVD-CWE-Other