CVE-2007-5480

Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid parameter to tc/contents/home001.jsp.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:innovaage:innovashop:*:*:*:*:*:*:*:*

Information

Published : 2007-10-16 16:17

Updated : 2017-07-28 18:33


NVD link : CVE-2007-5480

Mitre link : CVE-2007-5480


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

innovaage

  • innovashop