CVE-2007-3120

Published: Jun 7, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.

Affected (18)

Products: Aiocp: Aiocp

Aiocp

1 product

Aiocp

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Aiocp Aiocp	Version 1.3.000
Aiocp Aiocp	Version 1.3.001
Aiocp Aiocp	Version 1.3.002
Aiocp Aiocp	Version 1.3.003
Aiocp Aiocp	Version 1.3.004
Aiocp Aiocp	Version 1.3.005
Aiocp Aiocp	Version 1.3.006
Aiocp Aiocp	Version 1.3.007
Aiocp Aiocp	Version 1.3.008
Aiocp Aiocp	Version 1.3.009
Aiocp Aiocp	Version 1.3.010
Aiocp Aiocp	Version 1.3.011
Aiocp Aiocp	Version 1.3.012
Aiocp Aiocp	Version 1.3.013
Aiocp Aiocp	Version 1.3.014
Aiocp Aiocp	Version 1.3.015
Aiocp Aiocp	Version 1.3.016
Aiocp Aiocp	Version 1.3.017