VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 7, 2007· Updated Jun 16, 2026

CVE-2007-3120

CVE-2007-3120

Description

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.

Affected products

19
  • Tecnick/Aiocp19 versions
    cpe:2.3:a:aiocp:aiocp:1.3.000:*:*:*:*:*:*:*+ 18 more
    • cpe:2.3:a:aiocp:aiocp:1.3.000:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.001:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.002:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.003:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.004:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.005:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.006:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.007:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.008:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.009:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.010:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.011:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.012:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.013:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.014:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.015:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.016:*:*:*:*:*:*:*
    • cpe:2.3:a:aiocp:aiocp:1.3.017:*:*:*:*:*:*:*
    • (no CPE)range: <1.3.017

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.