CVEs-PoC/2007/CVE-2007-1848.md

### [CVE-2007-1848](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1848)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Cross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or HTML via the desc[][title] field.  NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS."

### POC

#### Reference
- http://securityreason.com/securityalert/2522

#### Github
No PoCs found on GitHub currently.