Unscored CVE-2007-5161 EUVD-2007-5142GHSA-59gx-rqrh-9rhc

Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web scr…

Published Oct 1, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web script or HTML via an item in a feed, as demonstrated by a WordPress blog update. NOTE: this was originally reported as XSS.

References

feedreader3-rssfeed-xss(36863) vdb-entry
37409 vdb-entry
25849 vdb-entry
ADV-2007-3316 vdb-entry
20070930 RE: feedreader3 has XSS vulnerability mailing-list
20070930 Re: [Full-disclosure] feedreader3 has XSS vulnerability mailing-list
20070928 feedreader3 has XSS vulnerability mailing-list
3183 third-party-advisory
26996 third-party-advisory