Unscored CVE-2003-1554 EUVD-2003-1544GHSA-hgm3-7qf4-w3mx

Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web s…

Published Mar 26, 2008 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.

References

20030329 ScozBook BETA 1.1 vulnerabilities mailing-list
8476 third-party-advisory
7235 vdb-entry
3781 third-party-advisory
scozbook-add-xss(11658) vdb-entry
1006413 vdb-entry