CVE-2007-3137

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-06-08 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sbl, (2) sbr, or (3) search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is incorrect.

Affected products

Webmaster Solutions Wmscms: 2.0

References

http://osvdb.org/37144
http://secunia.com/advisories/25583
http://securityreason.com/securityalert/2789
http://www.securityfocus.com/archive/1/470758/100/0/threaded
http://www.securityfocus.com/bid/24365
https://exchange.xforce.ibmcloud.com/vulnerabilities/34763
http://osvdb.org/37144
http://secunia.com/advisories/25583
http://securityreason.com/securityalert/2789
http://www.securityfocus.com/archive/1/470758/100/0/threaded
http://www.securityfocus.com/bid/24365
https://exchange.xforce.ibmcloud.com/vulnerabilities/34763

Get alerted when CVE-2007-3137 or the next vulnerability affects your stack