Unscored severity · published Jun 6, 2007
CVE-2007-3064
Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MD
MY Datebook · Mealex
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3064
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3064
osvdb.org
http://osvdb.org/38385
www.securityfocus.com
http://www.securityfocus.com/archive/1/470483/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/24311
www.vupen.com
http://www.vupen.com/english/advisories/2007/2062
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34717