CVE-2003-1347

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.01% chance of exploitation in the next 30 days, 79th percentile

Published

2007-10-14

Updated

2024-08-08

ExploitDB entries (4)

• https://www.exploit-db.com/exploits/22166
• https://www.exploit-db.com/exploits/22165
• https://www.exploit-db.com/exploits/22164
• https://www.exploit-db.com/exploits/22163

References

• CVE Record
• NVD entry

Related

• CVE-2003-1344
• CVE-2003-1348
• CVE-2003-1343
• CVE-2003-1350
• CVE-2003-1342
• CVE-2003-1354