CVE-2007-3299
- Source
- https://cve.org/CVERecord?id=CVE-2007-3299
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2007-3299.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2007-3299
- Downstream
- Withdrawn
- 2026-01-27T04:07:56.249393Z
- Published
- 2007-06-20T22:30:00Z
- Modified
- 2026-01-27T04:07:56.249393Z
- Summary
- [none]
- Details
-
Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows remote attackers to inject arbitrary web script or HTML via a search string.
- References
-
- http://secunia.com/advisories/25776
- http://www.vupen.com/english/advisories/2007/2250
- http://www.stedee.id.au/flyspray/task/10
- http://osvdb.org/37478
- http://www.securityfocus.com/bid/24587
- http://www.stedee.id.au/awffull/changes
- http://www.stedee.id.au/pipermail/awffull/2007-May/000363.html
- http://www.stedee.id.au/pipermail/awffull/2007-May/000364.html
- http://www.stedee.id.au/pipermail/awffull/2007-May/000365.html