CVE

Id
4609  
CVE No.
CVE-2002-0217  
Status
Candidate  
Description
Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.  
Phase
Proposed (20020502)  
Votes
ACCEPT(1) Green | NOOP(3) Cole, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23041 4609 CVE-2002-0217 BUGTRAQ:20020129 Xoops Private Message System Script injection  View
23042 4609 CVE-2002-0217 URL:http://online.securityfocus.com/archive/1/252828  View
23043 4609 CVE-2002-0217 BID:3978  View
23044 4609 CVE-2002-0217 URL:http://www.securityfocus.com/bid/3978  View
23045 4609 CVE-2002-0217 BID:3981  View
23046 4609 CVE-2002-0217 URL:http://www.securityfocus.com/bid/3981  View
23047 4609 CVE-2002-0217 XF:xoops-private-message-css(8025)  View
23048 4609 CVE-2002-0217 URL:http://www.iss.net/security_center/static/8025.php  View
23049 4609 CVE-2002-0217 XF:xoops-pmlite-image-css(8030)  View

Related JVN