CVE-2007-2337 | BDVDB-2026-23818 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (b) magpie_simple.php in external/magpierss/scripts/, the (2) rss_url parameter to (c) magpie_slashbox.php in external/magpierss/scripts/, and the (3) body parameter to the (d) weblogmodule (aka Weblog Comments) module.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/23574
http://osvdb.org/35642
http://osvdb.org/35643
http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10
http://osvdb.org/35641
http://osvdb.org/35640
https://exchange.xforce.ibmcloud.com/vulnerabilities/34077

Exploit#

No public exploit known

History#

Version 12007-04-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.