CVE-2007-0265 | BDVDB-2026-21597 Detail
Description#
Multiple cross-site scripting (XSS) vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pic parameter to custom/piczoom.asp, (2) the nocatname parameter to boxx/user-upload.asp, or (3) the iid parameter to indexes/newscomments.asp.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://osvdb.org/33468
- http://secunia.com/advisories/23759
- http://osvdb.org/33469
- http://osvdb.org/33467
- http://www.vupen.com/english/advisories/2007/0208
- http://www.bugsec.com/articles.php?Security=20
- http://osvdb.org/32828
- http://osvdb.org/32826
- http://osvdb.org/32827
- http://www.securityfocus.com/archive/1/456699/100/0/threaded
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.