Vulnerabilities > CVE-2007-6489 - Cross-Site Scripting vulnerability in Falcon Series ONE CMS 1.4.3

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
falcon
exploit available
NVD
Published: 2007-12-20
Updated: 2017-09-29

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gb_mail, (2) gb_name, and (3) gb_text parameters in a guestbook action to index.php, and unspecified other vectors.

Vulnerable Configurations

Part Description Count
Application
Falcon
1

Exploit-Db

descriptionFalcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities. CVE-2007-6488,CVE-2007-6489,CVE-2007-6490. Webapps exploit for php platform
fileexploits/php/webapps/4712.txt
idEDB-ID:4712
last seen2016-01-31
modified2007-12-10
platformphp
port
published2007-12-10
reporterMhZ91
sourcehttps://www.exploit-db.com/download/4712/
titlefalcon CMS 1.4.3 rfi/XSS Multiple Vulnerabilities
typewebapps

References