CVEvulnerability
CVE-2007-6560
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via (1) the newconfname parameter to profiles.php or (2) the conf parameter to index.php.
Affected configurations
• logaholic logaholic 0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/39792 osvdb.org
- http://osvdb.org/39793 osvdb.org
- http://secunia.com/advisories/28263 secunia.com
- http://securityreason.com/securityalert/3496 securityreason.com
- http://www.securityfocus.com/archive/1/485480/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490101/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27003 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39223 exchange.xforce.ibmcloud.com
- http://osvdb.org/39792 osvdb.org
- http://osvdb.org/39793 osvdb.org
- http://secunia.com/advisories/28263 secunia.com
- http://securityreason.com/securityalert/3496 securityreason.com
- http://www.securityfocus.com/archive/1/485480/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490101/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27003 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39223 exchange.xforce.ibmcloud.com