CVE-2007-3991 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.5% (pctl 74)
Patch early
A public exploit exists.
Description
Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz (Ady), (2) Soyadiniz (Soyady), (3) Ehliyet, (4) Askerlik, and (5) GSM parameters; and possibly other unspecified vectors.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.53% — more likely to be exploited than 74% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-07-25 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| asp indir | cvmatik |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | ASP cvmatik 1.1 - Multiple HTML Injection Vulnerabilities | 2007-07-23 |
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/25008.html
- http://osvdb.org/36471
- http://secunia.com/advisories/26174
- http://www.securityfocus.com/bid/25008
- http://www.vupen.com/english/advisories/2007/2604
- http://downloads.securityfocus.com/vulnerabilities/exploits/25008.html
- http://osvdb.org/36471
- http://secunia.com/advisories/26174
- http://www.securityfocus.com/bid/25008
- http://www.vupen.com/english/advisories/2007/2604
→ the Explorer · watch your stack · NVD