Unscored severity · published Jan 18, 2007
CVE-2007-0302
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a)…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Username and (3) Update parameters to (b) Members1.aspx.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Instantasp · Instantasp
4.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0302
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0302
osvdb.org
http://osvdb.org/32852
osvdb.org
http://osvdb.org/32853
secunia.com
http://secunia.com/advisories/23787
securityreason.com
http://securityreason.com/securityalert/2164
www.securityfocus.com
http://www.securityfocus.com/archive/1/456970/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/22052