CVE-2007-2532

Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or…

published May 9, 2007

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) to (1) sendmail.php or (2) order_form.php, different vectors than CVE-2006-6734.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03725 · 89.7th percentile
Published
2007-05-09T00:00Z
EPSS history
Timeline
  • 09 MAY 00:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or…
    cvelistv5