Unscored severity · published Apr 26, 2007
CVE-2007-2308
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok parameter
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FL
Flowers · Flowers
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2308
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2308
securityreason.com
http://securityreason.com/securityalert/2639
www.securityfocus.com
http://www.securityfocus.com/archive/1/465730/100/0/threaded
Exploit
http://www.securityfocus.com/bid/23488
www.vupen.com
http://www.vupen.com/english/advisories/2007/1402
More from Flowers
–
CVE-2007-2309
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter