CVE-2003-1370

Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via (1) the Author field in the Guestbook module, (2) the Titre or Pseudo fields in the Forum module, or (3) "La Tribune Libre" in the Shoutbox module.
Configurations

Configuration 1 (hide)

cpe:2.3:a:nuked-klan:nuked-klan:1.2_beta:*:*:*:*:*:*:*

History

No history.

Information

Published : 2003-12-31 05:00

Updated : 2023-12-10 10:17


NVD link : CVE-2003-1370

Mitre link : CVE-2003-1370

CVE.ORG link : CVE-2003-1370


JSON object : View

Products Affected

nuked-klan

  • nuked-klan
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')