Unscored severity · published Jan 19, 2007
CVE-2007-0390
Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web script or HTML via the tag parameter
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web script or HTML via the tag parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Sabros.us · Sabros.us
1.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0390
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0390
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051868.html
osvdb.org
http://osvdb.org/31602
secunia.com
http://secunia.com/advisories/23824
securityreason.com
http://securityreason.com/securityalert/2170
www.securityfocus.com
http://www.securityfocus.com/archive/1/457331/100/0/threaded
Exploit
http://www.securityfocus.com/bid/22115
More from Sabros.us
–
CVE-2008-1799
Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a