CVE-2007-1280: XSS
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcshhome.htm in WebHelp, (3) wfstartpage.js and (4) wfstartqs.htm in FlashHelp, or (5) WindowManager.dll in RoboHelp Server 6.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1280?
CVE-2007-1280 is classified as a high-severity vulnerability due to its ability to facilitate cross-site scripting attacks.
How do I fix CVE-2007-1280?
To fix CVE-2007-1280, update Adobe RoboHelp to version 7 or later, which addresses this vulnerability.
Who is affected by CVE-2007-1280?
CVE-2007-1280 affects users of Adobe RoboHelp versions x5, 6, and Adobe RoboHelp Server 6.
What type of vulnerability is CVE-2007-1280?
CVE-2007-1280 is a cross-site scripting (XSS) vulnerability that allows attackers to inject scripts into web pages.
How does CVE-2007-1280 work?
CVE-2007-1280 works by enabling attackers to inject arbitrary web scripts or HTML into a URL after a hash in the URL path.