CVE-2007-3991

MITTEL 4.3CVE-2007-3991 · Published 25/07/2007 · updated 16/06/2026

Kurz gesagt

CVE-2007-3991 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in cvmatik (asp indir).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 74.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
cvmatik asp_indir	`≤ 1.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz (Ady), (2) Soyadiniz (Soyady), (3) Ehliyet, (4) Askerlik, and (5) GSM parameters; and possibly other unspecified vectors.

References

downloads.securityfocus.com/vulnerabilities/exploits/25008.html · Exploit
osvdb.org/36471
secunia.com/advisories/26174 · Vendor Advisory
securityfocus.com/bid/25008 · Exploit
vupen.com/english/advisories/2007/2604

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free