Unscored severity · published Sep 6, 2007
CVE-2007-4745
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AK
Akobook · Joomla
3.42 · source: NVD
MS
Mambo Site Server · Mambo
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4745
osvdb.org
http://osvdb.org/37533
Vendor Advisory
http://secunia.com/advisories/26706
securityreason.com
http://securityreason.com/securityalert/3101
Vendor Advisory
http://trew.icenetx.net/toolz/advisory-mambo-akobook-en.txt
www.securityfocus.com
http://www.securityfocus.com/bid/25576
www.vupen.com
http://www.vupen.com/english/advisories/2007/3080