CVEvulnerability
CVE-2007-3352
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe.
Affected configurations
• stephen ostermiller contact form 2.00.02
References
- http://bugzilla.ostermiller.com/show_bug.cgi?id=151 Patch
- http://ostermiller.org/contactform/ ostermiller.org
- http://osvdb.org/36372 osvdb.org
- http://secunia.com/advisories/25812 secunia.com
- http://www.attrition.org/pipermail/vim/2007-June/001669.html www.attrition.org
- http://www.securityfocus.com/bid/24559 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2333 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34962 exchange.xforce.ibmcloud.com
- http://bugzilla.ostermiller.com/show_bug.cgi?id=151 Patch
- http://ostermiller.org/contactform/ ostermiller.org
- http://osvdb.org/36372 osvdb.org
- http://secunia.com/advisories/25812 secunia.com
- http://www.attrition.org/pipermail/vim/2007-June/001669.html www.attrition.org
- http://www.securityfocus.com/bid/24559 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2333 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34962 exchange.xforce.ibmcloud.com