CVE-2007-6608

NONE

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admi

公開日: 12/31/2007更新日: 4/9/2025

説明

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php.

AI分析AIによる分析

影響を受ける製品

openbiblioopenbiblio
0.2
openbiblioopenbiblio
0.2.1
openbiblioopenbiblio
0.3
openbiblioopenbiblio
0.5.1
openbiblioopenbiblio
0.5.2
openbiblioopenbiblio
0.5.2_pre4

利用可能なエクスプロイト (3)

参照