CVE-2007-5698: Cross-site scripting (XSS) vulnerability in default.asp in CREApark GOLD KOY PORTALI allows remote attacker...

Security readout for executives and security teams

This is an old reported cross-site scripting issue in CREApark GOLD KOY PORTALI. A remote attacker may be able to make the site reflect malicious script through the aranan search parameter. The official record says the provenance is unknown and based only on third-party information. Exposure is most likely limited to organizations still running the legacy CREApark GOLD KOY PORTALI application with default.asp reachable. The source bundle lists affected vendor, product, versions, and CPEs as n/a, so exposure cannot be reliably scoped from these sources alone. Treat this as a legacy exposure cleanup item unless the application is internet-facing or business-critical. The uncertainty is high, but unsupported public ASP applications can create avoidable customer and session-risk exposure. Mitigation focus: Check vendor or maintainer guidance for any available fix or retirement notice.; Inventory and remove unsupported CREApark GOLD KOY PORTALI deployments where possible.; If still required, restrict public access to the affected application..

Prepared

Jun 29, 2026, 01:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.