CVE

Id
10083  
CVE No.
CVE-2004-1655  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module.  
Phase
Assigned (20050221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
69218 10083 CVE-2004-1655 BUGTRAQ:20040901 Multiple Vulnerabilities In phpWebsite  View
69219 10083 CVE-2004-1655 URL:http://marc.info/?l=bugtraq&m=109413493005513&w=2  View
69220 10083 CVE-2004-1655 MISC:http://www.gulftech.org/?node=research&article_id=00048-08312004  View
69221 10083 CVE-2004-1655 CONFIRM:http://www.phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=822  View
69222 10083 CVE-2004-1655 BID:11088  View
69223 10083 CVE-2004-1655 URL:http://www.securityfocus.com/bid/11088  View
69224 10083 CVE-2004-1655 SECTRACK:1011120  View
69225 10083 CVE-2004-1655 URL:http://securitytracker.com/id?1011120  View
69226 10083 CVE-2004-1655 SECUNIA:12438  View
69227 10083 CVE-2004-1655 URL:http://secunia.com/advisories/12438  View
69228 10083 CVE-2004-1655 XF:phpwebsite-comments-module-xss(17202)  View
69229 10083 CVE-2004-1655 URL:http://xforce.iss.net/xforce/xfdb/17202  View
69230 10083 CVE-2004-1655 XF:phpwebsite-notes-script-injection(17203)  View

Related JVN