VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jun 7, 2007· Updated Apr 23, 2026

CVE-2007-3120

CVE-2007-3120

Description

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.

Affected products

18
  • Aiocp/Aiocp18 versions
    cpe:2.3:a:aiocp:aiocp:1.3.000:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:aiocp:aiocp:1.3.000:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.001:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.002:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.003:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.004:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.005:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.006:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.007:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.008:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.009:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.010:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.011:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.012:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.013:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.014:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.015:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.016:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.017:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.