CVE-2007-5983

Published: Nov 15, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).

Affected (14)

Products: Justin Hagstrom: Autoindex Php Script

Justin Hagstrom

1 product

Autoindex Php Script

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Justin Hagstrom Autoindex Php Script	Version 2.0.0
Justin Hagstrom Autoindex Php Script	Version 2.0.1
Justin Hagstrom Autoindex Php Script	Version 2.0.2
Justin Hagstrom Autoindex Php Script	Version 2.0.3
Justin Hagstrom Autoindex Php Script	Version 2.0.4
Justin Hagstrom Autoindex Php Script	Version 2.0.5
Justin Hagstrom Autoindex Php Script	Version 2.0.6
Justin Hagstrom Autoindex Php Script	Version 2.0.7
Justin Hagstrom Autoindex Php Script	Version 2.1.0
Justin Hagstrom Autoindex Php Script	Version 2.1.1
Justin Hagstrom Autoindex Php Script	Version 2.1.2
Justin Hagstrom Autoindex Php Script	Version 2.2.0
Justin Hagstrom Autoindex Php Script	Version 2.2.1
Justin Hagstrom Autoindex Php Script	Version 2.2.2