CVE-2007-6270 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 2.3% (pctl 83)
Patch early
A public exploit exists.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx and the (2) template parameter to pages/default.aspx.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 2.33% — more likely to be exploited than 83% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-12-07 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| xigla | absolute news manager.net |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting | 2007-12-04 |
| exploit-db | Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Cross-Site Scripting | 2007-12-04 |
References
- http://marc.info/?l=bugtraq&m=119678724111351&w=2
- http://osvdb.org/40577
- http://osvdb.org/40578
- http://secunia.com/advisories/27923
- http://www.procheckup.com/Vulnerability_PR07-39.php
- http://www.securityfocus.com/bid/26692
- http://www.xigla.com/news/default.aspx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38872
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38873
- http://marc.info/?l=bugtraq&m=119678724111351&w=2
- http://osvdb.org/40577
- http://osvdb.org/40578
- http://secunia.com/advisories/27923
- http://www.procheckup.com/Vulnerability_PR07-39.php
- http://www.securityfocus.com/bid/26692
- http://www.xigla.com/news/default.aspx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38872
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38873
→ the Explorer · watch your stack · NVD