CVE-2003-1400: XSS
Published Dec 31, 2003
·Updated
Cross-site scripting (XSS) vulnerability in the YourAccount module for PHP-Nuke 5.0 through 6.0 allows remote attackers to inject arbitrary web script or HTML via the useravatar parameter.
Affected Software
10 affected components
Francisco Burzi PHP-Nuke=5.3.1
Francisco Burzi PHP-Nuke=5.1
Francisco Burzi PHP-Nuke=5.0
Francisco Burzi PHP-Nuke=5.5
Francisco Burzi PHP-Nuke=5.4
Francisco Burzi PHP-Nuke=5.2a
Francisco Burzi PHP-Nuke=5.0.1
Francisco Burzi PHP-Nuke=5.2
Francisco Burzi PHP-Nuke=5.6
Francisco Burzi PHP-Nuke=6.0
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Oct 19, 2007
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1400?
CVE-2003-1400 has a medium severity level due to its potential for cross-site scripting exploits.
2
How do I fix CVE-2003-1400?
To fix CVE-2003-1400, upgrade your PHP-Nuke installation to a version that is not affected by this vulnerability.
3
Which versions of PHP-Nuke are affected by CVE-2003-1400?
CVE-2003-1400 affects PHP-Nuke versions 5.0 through 6.0.
4
What kind of attacks can CVE-2003-1400 facilitate?
CVE-2003-1400 enables remote attackers to inject arbitrary web scripts or HTML into affected systems.
5
Is CVE-2003-1400 a known vulnerability with documented exploits?
Yes, CVE-2003-1400 is a known vulnerability that has been documented and can be exploited if left unaddressed.