Vulnerability Details CVE-2007-4630
Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.065
EPSS Ranking 90.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/26648
- http://securityreason.com/securityalert/3080
- http://www.osvdb.org/36709
- http://www.securityfocus.com/archive/1/478152/100/0/threaded
- http://www.securityfocus.com/bid/25492
- http://www.securitytracker.com/id?1018634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36362
- http://secunia.com/advisories/26648
- http://securityreason.com/securityalert/3080
- http://www.osvdb.org/36709
- http://www.securityfocus.com/archive/1/478152/100/0/threaded
- http://www.securityfocus.com/bid/25492
- http://www.securitytracker.com/id?1018634
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36362
Products affected by CVE-2007-4630
-
cpe:2.3:a:xigla:absolute_poll_manager_xe:4.1