← back
CVE-2003-0009

CVE-2003-0009

EPSS 15.1%
Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/22289unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=104636383018686&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-006http://www.ciac.org/ciac/bulletins/n-047.shtmlhttp://www.iss.net/security_center/static/11425.phphttp://www.kb.cert.org/vuls/id/489721http://www.osvdb.org/6074http://www.securityfocus.com/bid/6966