CVE

Id
10380  
CVE No.
CVE-2004-1954  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments