CVE-2007-4178

MEDIO 4.3CVE-2007-4178 · Published 08/08/2007 · updated 16/06/2026

In breve

CVE-2007-4178 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda webdirector (amg soft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 75.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
webdirector amg_soft	`≤ 2.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the deslocal parameter.

References

osvdb.org/36439
pridels-team.blogspot.com/2007/08/webdirector-xss-vuln.html
secunia.com/advisories/26315 · Vendor Advisory
securityfocus.com/bid/25166 · Exploit
vupen.com/english/advisories/2007/2765

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free