Vulnerability Details CVE-2007-3120
Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2007-3120
-
cpe:2.3:a:aiocp:aiocp:1.3.000
-
cpe:2.3:a:aiocp:aiocp:1.3.001
-
cpe:2.3:a:aiocp:aiocp:1.3.002
-
cpe:2.3:a:aiocp:aiocp:1.3.003
-
cpe:2.3:a:aiocp:aiocp:1.3.004
-
cpe:2.3:a:aiocp:aiocp:1.3.005
-
cpe:2.3:a:aiocp:aiocp:1.3.006
-
cpe:2.3:a:aiocp:aiocp:1.3.007
-
cpe:2.3:a:aiocp:aiocp:1.3.008
-
cpe:2.3:a:aiocp:aiocp:1.3.009
-
cpe:2.3:a:aiocp:aiocp:1.3.010
-
cpe:2.3:a:aiocp:aiocp:1.3.011
-
cpe:2.3:a:aiocp:aiocp:1.3.012
-
cpe:2.3:a:aiocp:aiocp:1.3.013
-
cpe:2.3:a:aiocp:aiocp:1.3.014
-
cpe:2.3:a:aiocp:aiocp:1.3.015
-
cpe:2.3:a:aiocp:aiocp:1.3.016
-
cpe:2.3:a:aiocp:aiocp:1.3.017