CVE-2007-2801

Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to…

published June 30, 2007

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) err and (2) warn parameters. NOTE: the vendor disputes the significance of the issue, stating that "eTicket is not designed to work with register_globals On."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02355 · 83.5th percentile
Published
2007-06-30T01:00Z
EPSS history
Timeline
  • 30 JUN 01:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to…
    cvelistv5