PT-2007-4560 · Php · Php Hosting Biller

Published 2007-06-19 · Updated 2018-10-16 · CVE-2007-3281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Php Hosting Biller version 1.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PATH INFO in index.php.

Recommendations For Php Hosting Biller version 1.0, consider validating and sanitizing user input to prevent the injection of malicious scripts or HTML, specifically for the PATH INFO in index.php. As a temporary workaround, restrict access to index.php to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-3281

Affected Products

Php Hosting Biller

References · 9

• 🔥 http://securityfocus.com/bid/24517 · Exploit
• 🔥 https://exploit-db.com/exploits/30200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3281 · Security Note
• http://securityreason.com/securityalert/2811 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34941 · Note
• http://vupen.com/english/advisories/2007/2248 · Note
• http://secunia.com/advisories/25681 · Note
• http://securityfocus.com/archive/1/471642/100/0/threaded · Note
• http://osvdb.org/36374 · Note