CVE-2007-0240

CVE Database · CVE-2007-0240

CVE-2007-0240

· N/AModified

CVSS v3.1

N/A

EPSS

1.56%

Published

Mar 22, 2007

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request.

Affected Products (1)

zope · zopevulnerable

References (18)

http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html

http://secunia.com/advisories/24017

http://secunia.com/advisories/24713

http://secunia.com/advisories/25239

http://www.debian.org/security/2007/dsa-1275

http://www.securityfocus.com/bid/23084

http://www.vupen.com/english/advisories/2007/1041

http://www.zope.org/Products/Zope/Hotfix-2007-03-20/announcement/view

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33187

http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html

http://secunia.com/advisories/24017

KEV Catalog EPSS Scores Vendors All CVEs