← Database

CVE-2007-2265

MEDIUM CVSS: 6.8 Published: 2007-04-25 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.

Affected Platforms

Phpee Ya Book

Weakness Type

NVD-CWE-Other

References