Published: 08/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) sbl, (2) sbr, or (3) search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is incorrect.

Vulnerable Product	Search on Vulmon	Subscribe to Product
webmaster solutions wmscms 2.0

source: wwwsecurityfocuscom/bid/24365/info WmsCMS is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser Attackers could exploit these issues to steal cookie-based authentication credentials from legitimate users of the site; othe ...

# Title: XSS, SQL injection vulnerability in WmsCMS # EDB-ID: # CVE: () # OSVDB-ID: () # Author: Ariko-Security # Published: 2010-06-05 ============ { Ariko-Security - Advisory #1/6/2010 } ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 (only XSS 3 params) Vendor's Description of Software: # www ...

CWE-79 http://www.securityfocus.com/bid/24365 http://secunia.com/advisories/25583 http://securityreason.com/securityalert/2789 http://osvdb.org/37144 https://exchange.xforce.ibmcloud.com/vulnerabilities/34763 http://www.securityfocus.com/archive/1/470758/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30162/

CVE-2007-3137

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect