CVE-2003-1088

Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2003-08-11

Last modified

2024-08-08

Affected products

• Zorum (Phpoutsourcing)

References

• http://marc.info/?l=bugtraq&m=106063199925536&w=2
• http://secunia.com/advisories/9497
• http://securitytracker.com/id?1013365
• http://www.securityfocus.com/bid/8388
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12867