CVE-2007-3339
Fusetalk - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP parameters to (a) forum/include/error/autherror.cfm, and the (3) FTVAR_SCRIPTRUN parameter to (b) forum/include/common/comfinish.cfm and (c) blog/include/common/comfinish.cfm.
Exploits (3)
exploitdb
WRITEUP
VERIFIED
by Ivan Almuina · textwebappscfm
https://www.exploit-db.com/exploits/30216
exploitdb
WRITEUP
VERIFIED
by Ivan Almuina · textwebappscfm
https://www.exploit-db.com/exploits/30206
exploitdb
WRITEUP
VERIFIED
by Ivan Almuina · textwebappsasp
https://www.exploit-db.com/exploits/30207
References (10)
Scores
EPSS
0.0361
EPSS Percentile
87.6%
Classification
CWE
CWE-79
Status
draft
Affected Products (15)
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
fusetalk/fusetalk
Timeline
Published
Jun 21, 2007
Tracked Since
Feb 18, 2026