CVE-2002-2178

Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.75% chance of exploitation in the next 30 days, 78th percentile

Published

2005-11-16

Updated

2024-09-17

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/21899
• https://www.exploit-db.com/exploits/21864

Security advisories

• http://www.iss.net/security_center/static/10256.php
• http://www.securityfocus.com/bid/5864

References

• CVE Record
• NVD entry