XSS in Uebimiau

CVE-2007-5235

Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.

Affected products

  • Uebimiau — versions 2.7.2, 2.7.9, 2.7.10
  • N/a — versions n/a

Weakness classification (CWE)

References