CVE-2007-2310: XSS
Published Apr 26, 2007
·Updated
Cross-site scripting (XSS) vulnerability in plugins/spaw/imgpopup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter.
Affected Software
1 affected component
BloofoxCMS BloofoxCMS=0.2.2
Event History
Apr 26, 2007
CVE Published
09:19 PM
Apr 27, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2310?
CVE-2007-2310 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How can I mitigate CVE-2007-2310?
To mitigate CVE-2007-2310, sanitize and validate the img_url parameter to prevent the injection of arbitrary web scripts or HTML.
3
Which software versions are affected by CVE-2007-2310?
CVE-2007-2310 affects BloofoxCMS version 0.2.2.
4
What type of vulnerability is CVE-2007-2310?
CVE-2007-2310 is a cross-site scripting (XSS) vulnerability.
5
Who can be impacted by CVE-2007-2310?
Remote attackers can exploit CVE-2007-2310 to inject malicious scripts into web applications used by BloofoxCMS.