CVE-2007-3352

Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe.

Link	Resource
http://bugzilla.ostermiller.com/show_bug.cgi?id=151	Patch
http://ostermiller.org/contactform/
http://www.attrition.org/pipermail/vim/2007-June/001669.html
http://www.securityfocus.com/bid/24559
http://secunia.com/advisories/25812
http://osvdb.org/36372
http://www.vupen.com/english/advisories/2007/2333
https://exchange.xforce.ibmcloud.com/vulnerabilities/34962

Configuration 1

cpe:2.3:a:stephen_ostermiller:contact_form:2.00.02:*:*:*:*:*:*:*

---

Published : 2007-06-22 06:30

Updated : 2017-07-29 01:32

---

NVD link : CVE-2007-3352

Mitre link : CVE-2007-3352

No products.

NVD-CWE-Other