Unscored severity · published Nov 14, 2007
CVE-2007-3694
Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script or HTML via the username…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BM
Broadcast Machine · Getmiro
0.9.9.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3694
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3694
securityreason.com
http://securityreason.com/securityalert/3363
www.int21.de
http://www.int21.de/cve/CVE-2007-3694-bm.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/483575/100/0/threaded
Exploit
http://www.securityfocus.com/bid/26407
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38418
More from Broadcast Machine
–
CVE-2008-6287
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1)…