CVE-2007-6608

NONE

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admi

Veröffentlicht: 12/31/2007Aktualisiert: 4/9/2025

Beschreibung

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php.

KI-AnalyseKI-gestützt

Betroffene Produkte

openbiblioopenbiblio
0.2
openbiblioopenbiblio
0.2.1
openbiblioopenbiblio
0.3
openbiblioopenbiblio
0.5.1
openbiblioopenbiblio
0.5.2
openbiblioopenbiblio
0.5.2_pre4

Verfügbare Exploits (3)

Referenzen