CVEvulnerability
CVE-2007-3291
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php.
Affected configurations
• livecms livecms 3.0
• livecms livecms 3.3
• livecms livecms 3.3 rc1
• livecms livecms 3.3 rc2
• livecms livecms 3.4
• livecms livecms 3.4a
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/37491 osvdb.org
- http://secunia.com/advisories/25744 Vendor Advisory
- http://www.securityfocus.com/bid/24580 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35148 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4082 www.exploit-db.com
- http://osvdb.org/37491 osvdb.org
- http://secunia.com/advisories/25744 Vendor Advisory
- http://www.securityfocus.com/bid/24580 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35148 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4082 www.exploit-db.com