CVE-2007-4115

MEDIUM 4.3CVE-2007-4115 · Published 31/07/2007 · updated 16/06/2026

In short

CVE-2007-4115 is a MEDIUM (CVSS 4.3) vulnerability affecting itcms (itcms).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
itcms itcms	`= 0.2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to (1) lang-en.php, (2) menu-ed.php, or (3) titletext-ed.php.

References

osvdb.org/37254
osvdb.org/37255
osvdb.org/37256
osvdb.org/39024
osvdb.org/39025
osvdb.org/39026
securityreason.com/securityalert/2953
securityfocus.com/archive/1/475064/100/0/threaded
securityfocus.com/bid/25129
exchange.xforce.ibmcloud.com/vulnerabilities/35663

More vulnerabilities in itcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free