cve/2007/CVE-2007-5161.md

CVE-2007-5161

Description

Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web script or HTML via an item in a feed, as demonstrated by a WordPress blog update. NOTE: this was originally reported as XSS.

POC

Reference

• http://marc.info/?l=full-disclosure&m=119115897930583&w=2
• http://securityreason.com/securityalert/3183

Github

No PoCs found on GitHub currently.