CVE-2007-3414

Published: Jun 26, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in access2asp 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) od and (2) search parameters to (a) suppliersList.asp and (b) contactsList.asp.

Affected (1)

Products: Access2asp: Access2asp

Access2asp

1 product

Access2asp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Access2asp Access2asp	version ≤ 4.5

References (12)

http://pridels-team.blogspot.com/2007/06/access2asp-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/25807

Source: cve@mitre.org

http://www.osvdb.org/37750

Source: cve@mitre.org

http://www.osvdb.org/37751

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2371

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35025

Source: cve@mitre.org

http://pridels-team.blogspot.com/2007/06/access2asp-xss-vuln.html