CVE-2007-6560

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-28 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via (1) the newconfname parameter to profiles.php or (2) the conf parameter to index.php.

Affected products

Logaholic: 0

References

http://osvdb.org/39792
http://osvdb.org/39793
http://secunia.com/advisories/28263
http://securityreason.com/securityalert/3496
http://www.securityfocus.com/archive/1/485480/100/0/threaded
http://www.securityfocus.com/archive/1/490101/100/0/threaded
http://www.securityfocus.com/bid/27003
https://exchange.xforce.ibmcloud.com/vulnerabilities/39223
http://osvdb.org/39792
http://osvdb.org/39793
http://secunia.com/advisories/28263
http://securityreason.com/securityalert/3496

Get alerted when CVE-2007-6560 or the next vulnerability affects your stack