CVE-2007-1248 - CVE House
Back to Database
Status published Medium CVE-2007-1248

Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) uid, and (3) nid parameters to (a) news.php, and the nid parameter to (b) rating.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1248

Credits & Attribution

No credits recorded in the NVD database.

References

More from built2go

View All →
CVE-2008-4497
SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings...
High 7.5
CVE-2007-2286
PHP remote file inclusion vulnerability in config.php in Built2Go PHP...
High 7.5
CVE-2006-2008
PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP...
High 7.5

Affected Vendor

Affected Software

news manager blog
Vulnerable Versions:
1.0

Timeline

Official Publish: March 3rd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.