Unscored CVE-2007-0191 EUVD-2007-0193GHSA-wf95-hqg3-wjr5

Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two ce…

Published Jan 11, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contents_new operation in the ad_contents section.

References

20070105 MkPortal Admin XSS mailing-list
mkportal-admin-xss(31304) vdb-entry
2138 third-party-advisory
33399 vdb-entry