Unscored CVE-2001-1526 EUVD-2001-1503GHSA-m3rj-2q5c-x472

Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject …

Published Jul 14, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter.

References

20011201 easynews 1.5 let's remote users modify database mailing-list
easynews-php-css(7658) vdb-entry