Vulnerability Description
Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | All versions |
| Microsoft | All Windows | All versions |
| Unix | Unix | any_version |
| Myphpnuke | Myphpnuke | 1.8.8 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.htmlExploit
- http://secunia.com/advisories/8125
- http://www.osvdb.org/3931
- http://www.securityfocus.com/bid/6892Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11376
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.htmlExploit
- http://secunia.com/advisories/8125
- http://www.osvdb.org/3931
- http://www.securityfocus.com/bid/6892Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11376
FAQ
What is CVE-2003-1372?
CVE-2003-1372 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (...
How severe is CVE-2003-1372?
CVE-2003-1372 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1372?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Microsoft All Windows, Unix Unix, Myphpnuke Myphpnuke.