Dotclear Other Vulnerability - CVE-2007-3672 - Vulnerability Database

Dotclear Other Vulnerability - CVE-2007-3672

Medium

Reference: CVE-2007-3672

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-3672

Title: Dotclear Other Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified form fields on the blogroll page.