CVE-2007-3352

Published: Jun 22, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe.

Affected (1)

Products: Stephen Ostermiller: Contact Form

Stephen Ostermiller

1 product

Contact Form

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Stephen Ostermiller Contact Form	Version 2.00.02

References (16)

http://bugzilla.ostermiller.com/show_bug.cgi?id=151

Source: cve@mitre.org

Patch

http://ostermiller.org/contactform/

Source: cve@mitre.org

http://osvdb.org/36372

Source: cve@mitre.org

http://secunia.com/advisories/25812

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2007-June/001669.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/24559

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2333

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34962

Source: cve@mitre.org

http://bugzilla.ostermiller.com/show_bug.cgi?id=151