Vulnerability Database

296,349

Total vulnerabilities in the database

CVE-2007-2716

Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information.

Published: May 16, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-2716
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
eqdkp / eqdkp	1.3_p4	1.3_p4.x
eqdkp / eqdkp	1.2.0	1.2.0.x
eqdkp / eqdkp	1.3.1_p1	1.3.1_p1.x
eqdkp / eqdkp	1.1.0	1.1.0.x
eqdkp / eqdkp	-	1.3.2c.x
eqdkp / eqdkp	1.3.1	1.3.1.x
eqdkp / eqdkp	1.3.0	1.3.0.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime