CVE-2007-5647

Socketkb - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) art_id or (2) node parameter in an article action to the default URI.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Ivan Sanchez · textwebappsphp
https://www.exploit-db.com/exploits/30693

Scores

EPSS 0.0213
EPSS Percentile 84.0%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

socketkb/socketkb

Timeline

Published Oct 23, 2007
Tracked Since Feb 18, 2026