CVE-2003-0736: XSS
Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcatid parameter in the fatcat module, (3) the PAGEid parameter in the pagemaster module, (4) the PDAlimit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0736?
CVE-2003-0736 is considered a medium severity vulnerability that allows cross-site scripting attacks.
How do I fix CVE-2003-0736?
To fix CVE-2003-0736, upgrade phpWebSite to version 0.9.1 or later to eliminate the vulnerabilities.
Which versions of phpWebSite are affected by CVE-2003-0736?
CVE-2003-0736 affects phpWebSite versions 0.9.0 and earlier.
What kind of attacks can occur due to CVE-2003-0736?
CVE-2003-0736 allows attackers to execute arbitrary web scripts in the context of the user's session.
What modules in phpWebSite are vulnerable due to CVE-2003-0736?
The vulnerable modules in phpWebSite related to CVE-2003-0736 include the calendar module, fatcat module, and pagemaster module.