CVE-2007-3067

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.06%

Published

Jun 6, 2007

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the (1) keyshow, (2) sortkey, and (3) show parameters to index.php.

Affected Products (1)

eqdkp · attunement_and_keyvulnerable

References (10)

http://osvdb.org/36930

http://secunia.com/advisories/25538

http://sourceforge.net/project/shownotes.php?release_id=512860&group_id=167016

http://www.vupen.com/english/advisories/2007/2045

https://exchange.xforce.ibmcloud.com/vulnerabilities/34700

http://osvdb.org/36930

http://secunia.com/advisories/25538

http://sourceforge.net/project/shownotes.php?release_id=512860&group_id=167016

http://www.vupen.com/english/advisories/2007/2045

https://exchange.xforce.ibmcloud.com/vulnerabilities/34700

KEV Catalog EPSS Scores Vendors All CVEs