CVE-2007-6597

IPortalX <Build 033 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the (1) KW and (2) SF parameters to forum/login_user.asp, and (3) the Date parameter to blogs.asp.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Doz · textwebappsasp
https://www.exploit-db.com/exploits/30940
exploitdb WORKING POC VERIFIED
by Doz · textwebappsasp
https://www.exploit-db.com/exploits/30941

Scores

EPSS 0.0406
EPSS Percentile 88.4%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

iportalx/iportalx
iportalx/iportalx

Timeline

Published Dec 31, 2007
Tracked Since Feb 18, 2026