CVEvulnerability
CVE-2003-1372
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters.
Affected configurations
• myphpnuke myphpnuke 1.8.8
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.html Exploit
- http://secunia.com/advisories/8125 secunia.com
- http://www.osvdb.org/3931 www.osvdb.org
- http://www.securityfocus.com/bid/6892 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11376 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.html Exploit
- http://secunia.com/advisories/8125 secunia.com
- http://www.osvdb.org/3931 www.osvdb.org
- http://www.securityfocus.com/bid/6892 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11376 exchange.xforce.ibmcloud.com