CVE-2007-5433

Siteup - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) search mask field.

References (6)

Scores

EPSS 0.0051
EPSS Percentile 66.0%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

siteup/siteup

Timeline

Published Oct 12, 2007
Tracked Since Feb 18, 2026