CVE-2007-6270

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx and the (2) template parameter to pages/default.aspx.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/38873

https://exchange.xforce.ibmcloud.com/vulnerabilities/38872

http://www.xigla.com/news/default.aspx

http://www.procheckup.com/Vulnerability_PR07-39.php

http://secunia.com/advisories/27923

http://osvdb.org/40578

http://osvdb.org/40577

http://marc.info/?l=bugtraq&m=119678724111351&w=2

Details

Source: Mitre, NVD

Published: 2007-12-07

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.0476