← Database

CVE-2007-3396

MEDIUM CVSS: 4.3 Published: 2007-06-26 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the opsubmenu parameter.

Affected Platforms

Key Focus Kf Web Server

Weakness Type

NVD-CWE-Other

References