CVE-2007-3352

MEDIO 4.3CVE-2007-3352 · Published 22/06/2007 · updated 16/06/2026

In breve

CVE-2007-3352 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda contact form (stephen ostermiller).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
contact form stephen_ostermiller	`= 2.00.02`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe.

References

bugzilla.ostermiller.com/show_bug.cgi · Patch
ostermiller.org/contactform
osvdb.org/36372
secunia.com/advisories/25812
attrition.org/pipermail/vim/2007-June/001669.html
securityfocus.com/bid/24559
vupen.com/english/advisories/2007/2333
exchange.xforce.ibmcloud.com/vulnerabilities/34962

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free