Vulnerability Description
Cross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the (1) titre, (2) Votre pseudo, (3) Votre e-mail, or (4) Votre message fields.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Py Software | Py-Livredor | 1.0 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0102.htmlExploit
- http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00024.htmlExploit
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004015.htmlExploit
- http://www.security-corp.org/advisories/SCSA-008.txt
- http://www.securityfocus.com/bid/6997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11448
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0102.htmlExploit
- http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00024.htmlExploit
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004015.htmlExploit
- http://www.security-corp.org/advisories/SCSA-008.txt
- http://www.securityfocus.com/bid/6997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11448
FAQ
What is CVE-2003-1384?
CVE-2003-1384 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the (1) titre, (2) Votre pseudo, (3) Votre e-mail, or (4) Vo...
How severe is CVE-2003-1384?
CVE-2003-1384 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1384?
Check the references section above for vendor advisories and patch information. Affected products include: Py Software Py-Livredor.