CVE-2007-4192

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-08 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.

Affected products

Ide Group Dvd Rental System Drs: 5.1

References

http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0020.html
http://osvdb.org/39522
http://secunia.com/advisories/26310
http://www.securityfocus.com/bid/25177
http://www.vupen.com/english/advisories/2007/2806
https://exchange.xforce.ibmcloud.com/vulnerabilities/35768
http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0020.html
http://osvdb.org/39522
http://secunia.com/advisories/26310
http://www.securityfocus.com/bid/25177
http://www.vupen.com/english/advisories/2007/2806
https://exchange.xforce.ibmcloud.com/vulnerabilities/35768

Get alerted when CVE-2007-4192 or the next vulnerability affects your stack