CVE-2007-3235

2007-06-1501:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON

Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary web script or HTML via the topic parameter. NOTE: this might be resultant from SQL injection.

References

osvdb.org/36405

secunia.com/advisories/25653

exchange.xforce.ibmcloud.com/vulnerabilities/34840

www.exploit-db.com/exploits/4062