CVE-2003-0208

Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2003-05-05

Last modified

2024-08-08

Affected products

• Flash (Macromedia)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004514.html
• http://marc.info/?l=bugtraq&m=105033712615013&w=2
• http://www.macromedia.com/support/flash/ts/documents/clicktag_security.htm
• http://www.securiteam.com/securitynews/5XP0B0U9PE.html