Unrated severityNVD Advisory· Published May 4, 2007· Updated Jun 16, 2026

CVE-2007-2499

Description

Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php.

Affected products

DVDdb/DVDdb2 versions
cpe:2.3:a:globalmegacorp:dvddb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:globalmegacorp:dvddb:*:*:*:*:*:*:*:*range: <=0.6
- (no CPE)range: <=0.6

Patches

Vulnerability mechanics

References

secunia.com/advisories/25127nvdVendor Advisory
osvdb.org/35544nvd
osvdb.org/35545nvd
pridels0.blogspot.com/2007/05/dvddb-xss-vuln.htmlnvd
www.securityfocus.com/bid/23764nvd
www.vupen.com/english/advisories/2007/1648nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34017nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000