38139vdb entry
http://osvdb.org/38139 CVE-2007-2879
GNUTurk - 'Mods.php' Cross-Site Scripting
Record summary
CVE-2007-2879 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGNUTurk - 'Mods.php' Cross-Site ScriptingExploitDB exploitby vagrantNot analyzed1 file
References
62737Third-party advisory
http://securityreason.com/securityalert/2737 20070525 GTP 3G © Gnuturk Portal System year=**&month= Cross-Site Scripting Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/469584/100/0/threaded 24152vdb entry
http://www.securityfocus.com/bid/24152 gnuturk-portal-mods-xss(34514)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34514 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2879