CVE-2007-4819

Txx CMS 0.2 - Cross-Site Scripting

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4819. PoCs published by Nice Name Crew.

AI-analyzed exploit summary This is a writeup detailing a file inclusion vulnerability in Txx CMS, specifically in multiple PHP files where the $doc_root variable is not properly defined, allowing for potential remote file inclusion attacks.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Nice Name Crew · textwebappsphp
https://www.exploit-db.com/exploits/4381

This is a writeup detailing a file inclusion vulnerability in Txx CMS, specifically in multiple PHP files where the $doc_root variable is not properly defined, allowing for potential remote file inclusion attacks.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Txx CMS
No auth needed
Prerequisites: Access to the vulnerable Txx CMS installation
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/478870/100/0/threaded
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4381
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3116
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/38389

Scores

EPSS 0.0152
EPSS Percentile 71.4%

Details

CWE
CWE-79
Status published
Products (1)
txx_cms/txx_cms 0.2
Published Sep 11, 2007
Tracked Since Feb 18, 2026