Unscored CVE-2007-3276 EUVD-2007-3266GHSA-hrvh-vj4j-f9xp

Cross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote attackers to inject arbitrary web script or…

Published Jun 19, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

36346 vdb-entry
25712 third-party-advisory
siteatschool-index-xss(34923) vdb-entry