Security Advisory

CVE-2007-3596

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-07-06 18:00:00
Last updated 2024-08-07 14:21:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter, which has unknown impact and remote attack vectors, probably cross-site scripting (XSS).