CVE-2003-0590

Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2003-08-18

Last modified

2024-08-08

Affected products

• Splatt Forum (Splatt)

References

• http://marc.info/?l=bugtraq&m=105830019209609&w=2
• http://members.fortunecity.it/lethalman2002/bugs/splatt.html