CVE-2007-3120

Опубликовано: 07 июн. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aiocp:aiocp:1.3.000:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.001:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.002:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.003:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.004:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.005:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.006:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.007:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.008:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.009:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.010:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.011:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.012:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.013:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.014:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.015:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.016:*:*:*:*:*:*:*

cpe:2.3:a:aiocp:aiocp:1.3.017:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00507

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-h2cw-8x87-xw5g

github

почти 4 года назад