CVE-2007-3299 | BDVDB-2026-24793 Detail
Description#
Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows remote attackers to inject arbitrary web script or HTML via a search string.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://osvdb.org/37478
- http://secunia.com/advisories/25776
- http://www.stedee.id.au/awffull/changes
- http://www.stedee.id.au/flyspray/task/10
- http://www.stedee.id.au/pipermail/awffull/2007-May/000365.html
- http://www.stedee.id.au/pipermail/awffull/2007-May/000364.html
- http://www.stedee.id.au/pipermail/awffull/2007-May/000363.html
- http://www.vupen.com/english/advisories/2007/2250
- http://www.securityfocus.com/bid/24587
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.