VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 26, 2007· Updated Jun 16, 2026

CVE-2007-0529

CVE-2007-0529

Description

Cross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link Directory (phpLD) 3.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted link, which is triggered when the administrator uses the "Validate Links" functionality.

Affected products

2
  • PHP Link Directory/PHP Link Directory2 versions
    cpe:2.3:a:php_link_directory:php_link_directory:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php_link_directory:php_link_directory:*:*:*:*:*:*:*:*range: <=3.0.6
    • (no CPE)range: <=3.0.6

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.