CVE-2002-1480
MEDIUM 6.8EPSS 4.3%
Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry.
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 4.27% chance of exploitation in the next 30 days, 91st percentile
- Published
- 2003-03-18
- Updated
- 2024-08-08
ExploitDB entries (1)
Security advisories
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0069.html
- http://www.iss.net/security_center/static/10060.php
- http://www.securityfocus.com/bid/5676