36329vdb entry
http://osvdb.org/36329 CVE-2007-2887
WYYS 1.0 - 'index.php' Cross-Site Scripting
Record summary
CVE-2007-2887 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWYYS 1.0 - 'index.php' Cross-Site ScriptingExploitDB exploitby vagrantNot analyzed1 file
References
738346vdb entry
http://osvdb.org/38346 25407Third-party advisory
http://secunia.com/advisories/25407 2742Third-party advisory
http://securityreason.com/securityalert/2742 20070524 WIYS v1.0 Cross-Site Scripting Vulnerability - (05.24.2007) (NEW)mailing list
http://www.securityfocus.com/archive/1/469500/100/0/threaded 24117vdb entry
http://www.securityfocus.com/bid/24117 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2887