← Database

CVE-2007-1248

MEDIUM CVSS: 4.3 Published: 2007-03-03 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) uid, and (3) nid parameters to (a) news.php, and the nid parameter to (b) rating.php.

Affected Platforms

Built2Go News Manager Blog

Weakness Type

CWE-79

References