CVE-2007-6136

Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) intro, and (3) question parameters, and (4) unspecified answer parameters, in a create_new action. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.securityfocus.com/bid/26544
http://secunia.com/advisories/27778	Vendor Advisory
http://osvdb.org/38800
https://exchange.xforce.ibmcloud.com/vulnerabilities/38633
http://www.securityfocus.com/archive/1/484073/100/0/threaded

Configuration 1

cpe:2.3:a:m2scripts:my_space_scripts_poll_creator:0:*:*:*:*:*:*:*

---

Published : 2007-11-27 07:46

Updated : 2018-10-15 09:50

---

NVD link : CVE-2007-6136

Mitre link : CVE-2007-6136

No products.

CWE-79