CVE-2003-1238: XSS
Published Dec 31, 2003
·Updated
Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.
Affected Software
4 affected components
Nuked-Klan Nuked-KlaN=1.2
Nuked-Klan Nuked-KlaN=1.2_beta
Nuked-Klan Nuked-KlaN=1.3
Nuked-Klan Nuked-KlaN=1.3_beta
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Nov 16, 2005
CVE Published
via MITRE·07:37 AM
Data Sourced
via MITRE·07:37 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1238?
CVE-2003-1238 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2003-1238?
To fix CVE-2003-1238, update Nuked-Klan to version 1.3 or later, which addresses the XSS vulnerability.
3
What modules are affected by CVE-2003-1238?
CVE-2003-1238 affects the Team, News, and Liens modules within Nuked-Klan.
4
Can CVE-2003-1238 lead to cookie theft?
Yes, CVE-2003-1238 can allow remote attackers to steal authentication cookies through script injection.
5
Is there a specific version of Nuked-Klan that is safe from CVE-2003-1238?
Yes, Nuked-Klan version 1.3 and later are safe from CVE-2003-1238.