CVE-2002-2178

Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Affected products

• Phpwebsite (Phpwebsite)

References

• http://www.iss.net/security_center/static/10256.php
• http://www.securityfocus.com/archive/1/293879
• http://www.securityfocus.com/bid/5864