CVE-2003-1184

Опубликовано: 03 нояб. 2003

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other "Diverse XSS Bugs."

Ссылки

http://secunia.com/advisories/10120
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=195009
Vendor Advisory
http://www.osvdb.org/3077
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4825
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4826
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4827
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4828
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4829
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8959
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/13582
http://secunia.com/advisories/10120
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=195009
Vendor Advisory
http://www.osvdb.org/3077
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4825
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4826
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4827
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4828
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/4829
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8959
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/13582

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:thwboard:thwboard:2.8_beta:*:*:*:*:*:*:*

cpe:2.3:a:thwboard:thwboard:2.81_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01804

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9vcq-3555-p465

github

больше 4 лет назад