Unscored CVE-2007-3129 EUVD-2007-3121GHSA-3mj5-5ph7-ggjq

Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote attackers to inject arbitrary web script or HT…

Published Jun 19, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the password parameter.

References

http://www.netvigilance.com/advisory0034
utopianewspro-login-xss(34902) vdb-entry
20070617 Utopia News Pro version 1.4.0 XSS Attack Vulnerability mailing-list
ADV-2007-2236 vdb-entry
24506 vdb-entry
34165 vdb-entry
20070617 Utopia News Pro version 1.4.0 XSS Attack Vulnerability mailing-list
25702 third-party-advisory