CVE-2007-0610: XSS

Published Jan 31, 2007

Updated

Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

CMSmadesimple CMS Made Simple=2.7

Event History

Jan 31, 2007

CVE Published

01:28 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0610?

CVE-2007-0610 is rated as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2007-0610?

To fix CVE-2007-0610, sanitize the sender parameter in the mailform feature to prevent the injection of malicious scripts.

Who is affected by CVE-2007-0610?

CVE-2007-0610 affects users of CMSimple version 2.7 and can allow attackers to exploit its mailform feature.

What type of vulnerability is CVE-2007-0610?

CVE-2007-0610 is classified as a cross-site scripting (XSS) vulnerability.

Can CVE-2007-0610 be exploited remotely?

Yes, CVE-2007-0610 can be exploited remotely by attackers to inject arbitrary web scripts.