CVE-2007-6460

Anon Proxy Server <0.101 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by (1) log.php or (2) logerror.php, a different vulnerability than CVE-2007-6459.

References (4)

[Product] http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_proxy_server/

[Exploit] http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_proxy_server/log.php?r1=284&r2=325

[Exploit] http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_proxy_server/logerror.php?r1=245&r2=325

[Product] http://sourceforge.net/forum/forum.php?forum_id=761265

Scores

EPSS 0.0029

EPSS Percentile 51.7%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

anon_proxy_server/anon_proxy_server

Timeline

Published Dec 20, 2007

Tracked Since Feb 18, 2026