CVE-2007-5990

ExoPHPdesk - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a user profile, possibly the (1) name and (2) website parameters to register.php.

References (7)

[Third Party Advisory, VDB Entry] http://osvdb.org/38672

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/38447

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/483673/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/26431

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/26453

[Third Party Advisory] http://secunia.com/advisories/27638

[Third Party Advisory] http://securityreason.com/securityalert/3368

Scores

EPSS 0.0051

EPSS Percentile 66.0%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

exo/exophpdesk

Timeline

Published Nov 15, 2007

Tracked Since Feb 18, 2026