CVE-2003-0736
Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the…
Does this matter?
Lower severity and a low EPSS score (2.73%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.73% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- phpwebsite/phpwebsite
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=106062021711496&w=2
- http://marc.info/?l=bugtraq&m=106252188522715&w=2
- http://www.kb.cert.org/vuls/id/664422US Government Resource
- http://marc.info/?l=bugtraq&m=106062021711496&w=2
- http://marc.info/?l=bugtraq&m=106252188522715&w=2
- http://www.kb.cert.org/vuls/id/664422US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.