CVE-2007-3559: XSS
Cross-site scripting (XSS) vulnerability in infusions/shoutboxpanel/shoutboxpanel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSIONQUERY constant.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3559?
CVE-2007-3559 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2007-3559?
To fix CVE-2007-3559, update your PHP-Fusion installation to version 6.01.11 or later, which addresses this vulnerability.
What are the affected versions in CVE-2007-3559?
CVE-2007-3559 affects PHP-Fusion versions 6.01.9 and 6.01.10 when guest posts are enabled.
Who can exploit CVE-2007-3559?
CVE-2007-3559 can be exploited by remote authenticated users who have access to post messages in the shoutbox.
What type of vulnerability is CVE-2007-3559?
CVE-2007-3559 is an example of a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.