CVE-2003-0217

Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2003-06-16

Last modified

2024-08-08

Affected products

• Instant Virtual Extranet (Neoteris)

References

• http://marc.info/?l=bugtraq&m=105283833617480&w=2