CVEvulnerability
CVE-2007-3137
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sbl, (2) sbr, or (3) search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is incorrect.
Affected configurations
• webmaster solutions wmscms 2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/37144 osvdb.org
- http://secunia.com/advisories/25583 Vendor Advisory
- http://securityreason.com/securityalert/2789 securityreason.com
- http://www.securityfocus.com/archive/1/470758/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24365 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34763 exchange.xforce.ibmcloud.com
- http://osvdb.org/37144 osvdb.org
- http://secunia.com/advisories/25583 Vendor Advisory
- http://securityreason.com/securityalert/2789 securityreason.com
- http://www.securityfocus.com/archive/1/470758/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24365 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34763 exchange.xforce.ibmcloud.com