CVEvulnerability

CVE-2007-3708

4.3 MEDIUM Published 2007-07-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-07-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xss_clean function.

Affected configurations

• codeigniter codeigniter 1.5.3

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html lists.grok.org.uk
http://osvdb.org/37907 osvdb.org
http://secunia.com/advisories/25991 secunia.com
http://securityreason.com/securityalert/2877 securityreason.com
http://www.securityfocus.com/archive/1/473190/100/0/threaded www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35350 exchange.xforce.ibmcloud.com
http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html lists.grok.org.uk
http://osvdb.org/37907 osvdb.org
http://secunia.com/advisories/25991 secunia.com
http://securityreason.com/securityalert/2877 securityreason.com
http://www.securityfocus.com/archive/1/473190/100/0/threaded www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35350 exchange.xforce.ibmcloud.com