← back
CVE-2004-1655

CVE-2004-1655

EPSS 2.2%
Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/24425unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=109413493005513&w=2http://secunia.com/advisories/12438http://securitytracker.com/id?1011120https://exchange.xforce.ibmcloud.com/vulnerabilities/17202https://exchange.xforce.ibmcloud.com/vulnerabilities/17203http://www.gulftech.org/?node=research&article_id=00048-08312004http://www.phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=822http://www.securityfocus.com/bid/11088