CVEvulnerability
CVE-2003-1554
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.
Affected configurations
• scoznet scozbook 1.1 beta
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/8476 Vendor Advisory
- http://securityreason.com/securityalert/3781 securityreason.com
- http://www.securityfocus.com/archive/1/316747/30/25280/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/7235 www.securityfocus.com
- http://www.securitytracker.com/id?1006413 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11658 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/8476 Vendor Advisory
- http://securityreason.com/securityalert/3781 securityreason.com
- http://www.securityfocus.com/archive/1/316747/30/25280/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/7235 www.securityfocus.com
- http://www.securitytracker.com/id?1006413 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11658 exchange.xforce.ibmcloud.com