CVE-2007-4745
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component ...
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
- Record
CVE-2007-4745- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
- Record
CVE-2007-4745- Updated
- 2026-11-02
EUVDEUVD-2007-4726 No score
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
- Record
EUVD-2007-4726- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4232-hhhx-rgv2 No score
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component ...
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function.
- Record
GHSA-4232-hhhx-rgv2- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4745 is a medium vulnerability (CVSS 4.3) in Joomla Akobook, published September 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. No source names a fixed version.
References
osvdb.org/37533
securityfocus.com/bid/25576
trew.icenetx.net/toolz/advisory-mambo-akobook-en.txt
secunia.com/advisories/26706
securityreason.com/securityalert/3101
vupen.com/english/advisories/2007/3080
exchange.xforce.ibmcloud.com/vulnerabilities/36471
nvd.nist.gov/vuln/detail/CVE-2007-4745
github.com/advisories/GHSA-4232-hhhx-rgv2