CVE-2007-4831: XSS
Published Sep 12, 2007
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.
Affected Software
1 affected component
TorrentTrader TorrentTrader=1.07
Event History
Sep 12, 2007
CVE Published
07:17 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4831?
CVE-2007-4831 is a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2007-4831?
To fix CVE-2007-4831, ensure input validation and output encoding for the avatar and title parameters in account_settings.php.
3
What types of attacks can be executed due to CVE-2007-4831?
CVE-2007-4831 allows attackers to execute arbitrary web scripts or HTML in users' browsers via cross-site scripting.
4
Who is affected by CVE-2007-4831?
Users of TorrentTrader version 1.07 are affected by CVE-2007-4831.
5
What components of TorrentTrader are vulnerable in CVE-2007-4831?
The vulnerable components in CVE-2007-4831 are the avatar and title parameters in the account_settings.php file.