CVE-2004-0248
N/A
N/A
Summary
Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15051
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15050
- http://www.securityfocus.com/bid/9569
- http://secunia.com/advisories/10797/
- http://marc.info/?l=bugtraq&m=107586932324901&w=2
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15051
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15050
- http://www.securityfocus.com/bid/9569
- http://secunia.com/advisories/10797/
- http://marc.info/?l=bugtraq&m=107586932324901&w=2
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.