CVE-2007-4048
phpgroupware - cross scripting vulnerability
EPSS 1.3%
Description
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
How to fix CVE-2007-4048
To remediate CVE-2007-4048, upgrade the affected package to a fixed version below.
- Debian/phpsysinfo—upgrade to 2.5.1-6.1 or later
Is CVE-2007-4048 being exploited?
Low — EPSS is 1.3%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.5.1-6.1