CVE-2003-1506

Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-79

Affected products

• Dansguardian (Daniel Barron)

References

• http://securityreason.com/securityalert/3299
• http://www.securityfocus.com/archive/1/342160
• http://www.securityfocus.com/archive/1/342551
• http://www.securityfocus.com/archive/1/342577
• http://www.securityfocus.com/bid/8876
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13507