CVEvulnerability
CVE-2007-2887
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-05-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page.
Affected configurations
• forsnet web icerik yonetim sistemi 1.0
References
- http://osvdb.org/36329 osvdb.org
- http://osvdb.org/38346 osvdb.org
- http://secunia.com/advisories/25407 secunia.com
- http://securityreason.com/securityalert/2742 securityreason.com
- http://www.securityfocus.com/archive/1/469500/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24117 www.securityfocus.com
- http://osvdb.org/36329 osvdb.org
- http://osvdb.org/38346 osvdb.org
- http://secunia.com/advisories/25407 secunia.com
- http://securityreason.com/securityalert/2742 securityreason.com
- http://www.securityfocus.com/archive/1/469500/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24117 www.securityfocus.com