Unrated severityNVD Advisory· Published May 22, 2007· Updated Apr 23, 2026

CVE-2007-2805

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the (1) ticketID, (2) view, and (3) fuse parameters.

Affected products

Clientexec/Clientexec
cpe:2.3:a:clientexec:clientexec:*:*:*:*:*:*:*:*
Range: <=3.0_beta2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

osvdb.org/37526nvd
pridels-team.blogspot.com/2007/05/clientexec-xss-vuln.htmlnvd
www.securityfocus.com/bid/24061nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34390nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000