CVEvulnerability
CVE-2007-2470
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.
Affected configurations
• filerun filerun (<= 1.0)
References
- http://pridels0.blogspot.com/2007/05/filerun-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/25075 Vendor Advisory
- http://www.securityfocus.com/bid/23752 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1627 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34007 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2007/05/filerun-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/25075 Vendor Advisory
- http://www.securityfocus.com/bid/23752 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1627 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34007 exchange.xforce.ibmcloud.com