CVE-2003-1204: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1204?
CVE-2003-1204 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2003-1204?
To fix CVE-2003-1204, upgrade to Mambo Site Server version 4.0.12 BETA or later, as previous versions are vulnerable.
What are the affected versions for CVE-2003-1204?
CVE-2003-1204 affects Mambo Site Server versions 4.0.12 BETA and earlier, including 4.0.11.
What type of vulnerability is CVE-2003-1204?
CVE-2003-1204 is a cross-site scripting (XSS) vulnerability that allows attackers to execute scripts on client browsers.
Can I mitigate CVE-2003-1204 without upgrading?
Mitigation strategies for CVE-2003-1204 are limited, and upgrading to a secure version is the most effective way to eliminate the risk.