CVE-2007-5293: Idmos

Low severity, CVSS 2.6. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject arbitrary web script or HTML via the (1) err_msg parameter to error.php and the (2) content parameter to templates/simple/ia.php.

Affected products

• Idmos Idmos: version 1.0-beta only

Published 2007-10-09. Last modified 2026-06-16.