Unscored CVE-2007-1161 EUVD-2007-1158GHSA-ff62-83w3-vf65

Cross-site scripting (XSS) vulnerability in call_entry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web scr…

Published Feb 28, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in call_entry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problem_desc parameter, as demonstrated by the ONLOAD attribute of a BODY element.

References

2333 third-party-advisory
33037 vdb-entry
20070222 [TRUE] Call Center Software - Remote Xss Post Exploit - mailing-list
20070221 Call Center Software - Remote Xss Post Exploit - mailing-list