CVE-2007-6545

NONE

Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/news/submit.php; (2) t

게시됨: 12/28/2007업데이트됨: 4/9/2025
NVD에서 보기MITRE에서 보기

설명

Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/news/submit.php; (2) the PATH_INFO to modules/news/index.php, possibly related to the XoopsPageNav class; or (3) an avatar image to edituser.php.

AI 분석AI 기반

영향받는 제품

runcmsruncms

사용 가능한 익스플로잇 (1)

참조