Unscored severity · published May 29, 2007
CVE-2007-2879
Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
Gnuturk Portal System · Gnuturk
3g · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2879
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2879
osvdb.org
http://osvdb.org/38139
securityreason.com
http://securityreason.com/securityalert/2737
www.securityfocus.com
http://www.securityfocus.com/archive/1/469584/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/24152
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34514
More from Gnuturk Portal System
–
CVE-2006-4867
SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the t_id parameter when the go parameter is "Forum."