CVE-2007-2470

Published: May 2, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.

Affected (1)

Products: Filerun: Filerun

Filerun

1 product

Filerun

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Filerun Filerun	Up to 1.0

References (10)

http://pridels0.blogspot.com/2007/05/filerun-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/25075

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/23752

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1627

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34007

Source: cve@mitre.org

http://pridels0.blogspot.com/2007/05/filerun-vuln.html