CVE-2007-4811

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-09-11 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via (1) the val parameter to alphabet.php in an alpha.albums action, or the PATH_INFO to (2) random.php or (3) admin/hidden.php.

Affected products

Netjuke: 1.0_rc2

References

http://osvdb.org/38402
http://osvdb.org/38403
http://osvdb.org/38404
http://securityreason.com/securityalert/3110
http://www.securityfocus.com/archive/1/478871/100/0/threaded
http://www.securityfocus.com/bid/25599
https://exchange.xforce.ibmcloud.com/vulnerabilities/36517
http://osvdb.org/38402
http://osvdb.org/38403
http://osvdb.org/38404
http://securityreason.com/securityalert/3110
http://www.securityfocus.com/archive/1/478871/100/0/threaded

Get alerted when CVE-2007-4811 or the next vulnerability affects your stack