Unscored severity · published Feb 6, 2007
CVE-2007-0763
Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the Autor…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the Autor field.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F3
F3site · F3site
2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0763
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0763
osvdb.org
http://osvdb.org/34668
Exploit
http://www.securityfocus.com/bid/22379
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32188
www.exploit-db.com
https://www.exploit-db.com/exploits/3255
More from F3site
–
CVE-2007-0764
Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF86 header in a file…