CVE Vulnerabilities

CVE-2007-3120

Published: Jun 07, 2007 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.

Affected Software

NameVendorStart VersionEnd Version
AiocpAiocp1.3.000 (including)1.3.000 (including)
AiocpAiocp1.3.001 (including)1.3.001 (including)
AiocpAiocp1.3.002 (including)1.3.002 (including)
AiocpAiocp1.3.003 (including)1.3.003 (including)
AiocpAiocp1.3.004 (including)1.3.004 (including)
AiocpAiocp1.3.005 (including)1.3.005 (including)
AiocpAiocp1.3.006 (including)1.3.006 (including)
AiocpAiocp1.3.007 (including)1.3.007 (including)
AiocpAiocp1.3.008 (including)1.3.008 (including)
AiocpAiocp1.3.009 (including)1.3.009 (including)
AiocpAiocp1.3.010 (including)1.3.010 (including)
AiocpAiocp1.3.011 (including)1.3.011 (including)
AiocpAiocp1.3.012 (including)1.3.012 (including)
AiocpAiocp1.3.013 (including)1.3.013 (including)
AiocpAiocp1.3.014 (including)1.3.014 (including)
AiocpAiocp1.3.015 (including)1.3.015 (including)
AiocpAiocp1.3.016 (including)1.3.016 (including)
AiocpAiocp1.3.017 (including)1.3.017 (including)

References