VULNERABILITY INTELLIGENCE
CVE-2007-4541
CVSS score4.3 MEDIUM
EPSS probability0.78%
CISA KEVNot currently listed
Published2007-08-27
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_SELF variable in modules/core/uim.php and (2) [url] tags in a comment in modules/core/fldm.php.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)