CVE-2007-3339 - CVE House
Back to Database
Status published Medium CVE-2007-3339

Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic,...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP parameters to (a) forum/include/error/autherror.cfm, and the (3) FTVAR_SCRIPTRUN parameter to (b) forum/include/common/comfinish.cfm and (c) blog/include/common/comfinish.cfm.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3339

Credits & Attribution

No credits recorded in the NVD database.

References

More from fusetalk

View All →
CVE-2012-5295
Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2...
Medium 4.3
CVE-2007-3705
SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to...
High 7.5
CVE-2007-3301
SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers...
High 7.5
CVE-2007-3273
SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote...
High 7.5
CVE-2004-1995
Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote...
Medium 6.5

Affected Vendor

Affected Software

fusetalk
Vulnerable Versions:
2.0, 3.0, 3.2, 4.0

Timeline

Official Publish: June 21st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.