CVEvulnerability
CVE-2007-6367
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field, different vectors than CVE-2007-2357.
Affected configurations
• sinecms sinecms (<= 2.3.4)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/27949 Vendor Advisory
- http://securityreason.com/securityalert/3444 securityreason.com
- http://www.securityfocus.com/archive/1/484648/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/485267/100/200/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38893 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4693 www.exploit-db.com
- http://secunia.com/advisories/27949 Vendor Advisory
- http://securityreason.com/securityalert/3444 securityreason.com
- http://www.securityfocus.com/archive/1/484648/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/485267/100/200/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38893 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4693 www.exploit-db.com