CVE-2007-6367

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field, different vectors than CVE-2007-2357.

Link	Resource
http://secunia.com/advisories/27949	Vendor Advisory
http://securityreason.com/securityalert/3444
https://exchange.xforce.ibmcloud.com/vulnerabilities/38893
https://www.exploit-db.com/exploits/4693
http://www.securityfocus.com/archive/1/485267/100/200/threaded
http://www.securityfocus.com/archive/1/484648/100/0/threaded

Configuration 1

cpe:2.3:a:sinecms:sinecms:*:*:*:*:*:*:*:*

---

Published : 2007-12-15 01:46

Updated : 2018-10-15 09:52

---

NVD link : CVE-2007-6367

Mitre link : CVE-2007-6367

No products.

CWE-79