CVE-2007-3887

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Isim, (2) Mesajiniz, and (3) E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/26079Vendor Advisory
http://secunia.com/advisories/26375Vendor Advisory
http://www.packetstormsecurity.org/0707-exploits/aspziy-xss.txtExploit
http://www.securityfocus.com/bid/24937
http://www.vupen.com/english/advisories/2007/2558Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/35445
http://secunia.com/advisories/26079Vendor Advisory
http://secunia.com/advisories/26375Vendor Advisory
http://www.packetstormsecurity.org/0707-exploits/aspziy-xss.txtExploit
http://www.securityfocus.com/bid/24937
http://www.vupen.com/english/advisories/2007/2558Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/35445

Timeline

Published: Jul 18, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-38884.3Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web s CVE-2007-38897.5Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via CVE-2007-38909.3Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary cod CVE-2007-38916.8Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HT CVE-2007-38927.5Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecif CVE-2007-38936.8Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified ve CVE-2007-38959.3Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafte CVE-2007-38969.3The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows rem CVE-2007-38979.3Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Proto CVE-2007-38986.4The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS s CVE-2007-38999.3Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execut CVE-2007-39018.5Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.