How severe is CVE-2007-0146?

CVE-2007-0146 has a CVSS 2.0 base score of 6.0, rated medium severity.

Is CVE-2007-0146 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0146?

CVE-2007-0146 affects Fix And Chips Computer Services Fix And Chips Cms. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-0146?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-0146 published?

CVE-2007-0146 was published on 2007-01-09 and last updated on 2026-06-16.

CVE-2007-0146

CVE-2007-0146 is a medium-severity vulnerability in Fix And Chips Computer Services Fix And Chips Cms with a CVSS 2.0 base score of 6.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 6.0)
EPSS exploit prediction: 1% (68th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Fix And Chips Computer Services Fix And Chips Cms
Published: 2007-01-09
Last modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) delete-announce.php; the (2) Announcement form field in (b) staff.php; the (3) Client Name, (4) Business Name, (5) Street, (6) Address 2, (7) Town/City, (8) Postcode, (9) Phone Number, (10) Email Address and (11) Website Address form fields in (c) new_customer.php; and unspecified fields in (d) search.php and (e) client-results.php.

Frequently asked questions

What is CVE-2007-0146?: Multiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) delete-announce.php; the (2) Announcement form field in (b) staff.php; the (3) Client Name, (4) Business Name, (5) Street, (6) Address 2, (7) Town/City, (8) Postcode, (9) Phone Number, (10) Email Address and (11) Website Address form fields in (c) new_customer.php; and unspecified fields in (d) search.php and (e) client-results.php.
How severe is CVE-2007-0146?: CVE-2007-0146 has a CVSS 2.0 base score of 6.0, rated medium severity.
Is CVE-2007-0146 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-0146?: CVE-2007-0146 affects Fix And Chips Computer Services Fix And Chips Cms. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-0146?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-0146 published?: CVE-2007-0146 was published on 2007-01-09 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:fix_and_chips_computer_services:fix_and_chips_cms:1.0:*:*:*:*:*:*:*