CVE-2003-1204: XSS
First published: Wed Dec 31 2003(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mambo Site Server | =4.0.11 | |
| Mambo Site Server | =4.0.12_beta | |
| Mambo Site Server | =4.0.12_beta | |
| Mambo Site Server | =4.0.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/306206
- http://www.securityfocus.com/bid/6571
- http://www.osvdb.org/7495
- http://www.osvdb.org/7496
- http://www.osvdb.org/7497
- http://www.osvdb.org/7498
- http://www.osvdb.org/7499
- http://www.osvdb.org/7500
- http://www.osvdb.org/7501
- http://www.osvdb.org/7502
- http://www.osvdb.org/7503
- http://www.osvdb.org/7504
- http://www.osvdb.org/7505
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11050
Frequently Asked Questions
What is the severity of CVE-2003-1204?
CVE-2003-1204 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2003-1204?
To fix CVE-2003-1204, upgrade to Mambo Site Server version 4.0.12 BETA or later, as previous versions are vulnerable.
What are the affected versions for CVE-2003-1204?
CVE-2003-1204 affects Mambo Site Server versions 4.0.12 BETA and earlier, including 4.0.11.
What type of vulnerability is CVE-2003-1204?
CVE-2003-1204 is a cross-site scripting (XSS) vulnerability that allows attackers to execute scripts on client browsers.
Can I mitigate CVE-2003-1204 without upgrading?
Mitigation strategies for CVE-2003-1204 are limited, and upgrading to a secure version is the most effective way to eliminate the risk.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/mambo
- canonical/mambo site server
- version/mambo site server/4.0.11
- version/mambo site server/4.0.12_beta