CVE-2007-3213

Published: Jun 14, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) mode parameters.

Affected (1)

Products: Sporum Forum: Sporum Forum

Sporum Forum

1 product

Sporum Forum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sporum Forum Sporum Forum	version ≤ 3.0.9

References (12)

http://osvdb.org/36384

Source: cve@mitre.org

http://pridels-team.blogspot.com/2007/06/sporum-forum-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/25617

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/24439

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2147

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34829

Source: cve@mitre.org

http://osvdb.org/36384