Security Advisory

CVE-2007-3485

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-06-28 20:00:00
Last updated 2024-08-07 14:21:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) within parameter to the default URI.