CVE-2007-5648
Rnote - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) d or the (2) u parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by RoMaNcYxHaCkEr · textwebappsphp
https://www.exploit-db.com/exploits/30695
Scores
EPSS
0.0130
EPSS Percentile
79.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
rnote/rnote
Timeline
Published
Oct 23, 2007
Tracked Since
Feb 18, 2026