CVE-2007-3405

Lebisoft Zdefter - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ad and (2) konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Scores

EPSS 0.0033
EPSS Percentile 55.8%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

lebisoft/lebisoft_zdefter

Timeline

Published Jun 26, 2007
Tracked Since Feb 18, 2026