CVE-2007-2600

N/A Unknown

Published: May 11, 2007 Modified: April 23, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or the (3) search parameter to search.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/35892

Source: cve@mitre.org

http://osvdb.org/35893

Source: cve@mitre.org

http://osvdb.org/35894

Source: cve@mitre.org

http://osvdb.org/35895

Source: cve@mitre.org

http://osvdb.org/35896

Source: cve@mitre.org

http://osvdb.org/35897

Source: cve@mitre.org

http://www.securityfocus.com/bid/23905

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1742

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34215

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3887

Source: cve@mitre.org

http://osvdb.org/35892