Published: 27/09/2007 Updated: 15/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote malicious users to inject arbitrary web script or HTML via (1) the l_username parameter to the default URI under admin/ or (2) the l_emoticonlist parameter to admin/emoticonlist.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
simpgb simpgb 1.46.02

source: wwwsecurityfocuscom/bid/25808/info SimpGB is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may ...

source: wwwsecurityfocuscom/bid/25808/info SimpGB is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This m ...

CWE-79 http://www.netvigilance.com/advisory0067 http://forum.boesch-it.de/viewtopic.php?t=2790 http://www.securityfocus.com/bid/25808 http://secunia.com/advisories/26974 http://securityreason.com/securityalert/3171 https://exchange.xforce.ibmcloud.com/vulnerabilities/36773 http://www.securityfocus.com/archive/1/480596/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30615/

CVE-2007-5127

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect