CVE-2007-3838

BASSO 2.6CVE-2007-3838 · Published 17/07/2007 · updated 16/06/2026

In breve

CVE-2007-3838 è una vulnerabilità BASSO (CVSS 2.6) che riguarda dr (tbdev.net).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dr tbdev.net	`= 010306= 11-10-05-beta-sf1_1= 16-12-05-beta-1_161`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/26120
securityfocus.com/bid/24923 · Exploit
securityfocus.com/data/vulnerabilities/exploits/24923.txt · Exploit

Altre vulnerabilità di dr

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free