CVE-2007-4745: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (comakobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4745?
CVE-2007-4745 is considered to have a medium severity due to its potential to facilitate cross-site scripting attacks.
How do I fix CVE-2007-4745?
To fix CVE-2007-4745, upgrade to a version of Akobook that is newer than 3.42, which contains the necessary security patches.
What applications are affected by CVE-2007-4745?
CVE-2007-4745 affects Mambo Site Server and Akobook versions 3.42 and earlier.
Can CVE-2007-4745 be exploited remotely?
Yes, CVE-2007-4745 can be exploited remotely by injecting scripts through vulnerable parameters.
What is the nature of the vulnerabilities in CVE-2007-4745?
CVE-2007-4745 consists of multiple cross-site scripting (XSS) vulnerabilities that allow for the injection of arbitrary web scripts or HTML.