CVE-2007-0365

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-19 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830.

Affected products

Nicola Asuni All In One Control Panel: through 1.3.009; 1.3.000, 1.3.001, 1.3.002, 1.3.003, 1.3.004, 1.3.005 (+3)

References

http://osvdb.org/32808
http://secunia.com/advisories/23732
http://sourceforge.net/project/shownotes.php?release_id=478370
http://www.vupen.com/english/advisories/2007/0189
https://exchange.xforce.ibmcloud.com/vulnerabilities/31486
http://osvdb.org/32808
http://secunia.com/advisories/23732
http://sourceforge.net/project/shownotes.php?release_id=478370
http://www.vupen.com/english/advisories/2007/0189
https://exchange.xforce.ibmcloud.com/vulnerabilities/31486

Get alerted when CVE-2007-0365 or the next vulnerability affects your stack