CVEvulnerability
CVE-2007-5480
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid parameter to tc/contents/home001.jsp.
Affected configurations
• innovaage innovashop
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=119248056804520&w=2 marc.info
- http://osvdb.org/37927 osvdb.org
- http://osvdb.org/37928 osvdb.org
- http://secunia.com/advisories/27225 secunia.com
- http://www.securityfocus.com/bid/26084 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37273 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=119248056804520&w=2 marc.info
- http://osvdb.org/37927 osvdb.org
- http://osvdb.org/37928 osvdb.org
- http://secunia.com/advisories/27225 secunia.com
- http://www.securityfocus.com/bid/26084 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37273 exchange.xforce.ibmcloud.com