CVE-2007-5013

Phormer - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) u, (2) p, (3) c, and (4) s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Scores

EPSS 0.0029
EPSS Percentile 51.7%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

phormer/phormer

Timeline

Published Sep 20, 2007
Tracked Since Feb 18, 2026