CVE-2007-1234

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-03 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php, (2) the search parameter to search.php, (3) the linkid parameter to redirect.php, or (4) the page parameter to calendar_events.php.

Affected products

Bj Sintay Sitex: 0.7.3

References

http://osvdb.org/33158
http://osvdb.org/33159
http://osvdb.org/33160
http://osvdb.org/33161
http://securityreason.com/securityalert/2373
http://www.securityfocus.com/archive/1/461305/100/0/threaded
http://www.securityfocus.com/archive/1/465849/100/200/threaded
http://osvdb.org/33158
http://osvdb.org/33159
http://osvdb.org/33160
http://osvdb.org/33161
http://securityreason.com/securityalert/2373

Get alerted when CVE-2007-1234 or the next vulnerability affects your stack