CVE-2007-6608

NONE

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admi

Publicado: 12/31/2007Actualizado: 4/9/2025

Descripción

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php.

Análisis IAImpulsado por IA

Productos Afectados

openbiblioopenbiblio
0.2
openbiblioopenbiblio
0.2.1
openbiblioopenbiblio
0.3
openbiblioopenbiblio
0.5.1
openbiblioopenbiblio
0.5.2
openbiblioopenbiblio
0.5.2_pre4

Exploits Disponibles (3)

Referencias