CVEvulnerability
CVE-2003-1347
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field.
Affected configurations
• geeklog geeklog 1.3.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://securityreason.com/securityalert/3226 securityreason.com
- http://www.geeklog.net/filemgmt/visit.php?lid=101 Patch
- http://www.securityfocus.com/archive/1/306770 Exploit
- http://www.securityfocus.com/bid/6601 Exploit
- http://www.securityfocus.com/bid/6602 Exploit
- http://www.securityfocus.com/bid/6603 Exploit
- http://www.securityfocus.com/bid/6604 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11075 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/3226 securityreason.com
- http://www.geeklog.net/filemgmt/visit.php?lid=101 Patch
- http://www.securityfocus.com/archive/1/306770 Exploit
- http://www.securityfocus.com/bid/6601 Exploit
- http://www.securityfocus.com/bid/6602 Exploit
- http://www.securityfocus.com/bid/6603 Exploit
- http://www.securityfocus.com/bid/6604 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11075 exchange.xforce.ibmcloud.com