CVE-2007-0054

Belchior Foundry Vcard Pro - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by exexp · textwebappsphp
https://www.exploit-db.com/exploits/29376

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/455615/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/31182
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21844
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/33359

Scores

EPSS 0.0046
EPSS Percentile 64.2%

Details

Status published
Products (1)
belchior_foundry/vcard_pro
Published Jan 04, 2007
Tracked Since Feb 18, 2026