VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 3, 2008· Updated Jun 16, 2026

CVE-2007-6616

CVE-2007-6616

Description

Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action. NOTE: some of these details are obtained from third party information.

Affected products

2
  • Simpleforum/Simpleforum2 versions
    cpe:2.3:a:simpleforum:simpleforum:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:simpleforum:simpleforum:*:*:*:*:*:*:*:*range: <=4.6.2
    • (no CPE)range: <=4.6.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.