Unscored CVE-2002-1950 EUVD-2002-1929GHSA-29gx-388f-w262

Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) the emai…

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) the email parameter of add.php or (2) the banner URL (banurl parameter) in the main list.

References

20021010 Multiple vulnerabilities in phpRank mailing-list
phprank-banner-url-xss(10351) vdb-entry
5946 vdb-entry