Unscored CVE-2004-1202 EUVD-2004-1199GHSA-m4wf-cgh7-9gv4

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote…

Published Dec 15, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

References

20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
phpcms-parser-xss(18272) vdb-entry
http://www.phpcms.de/download/index.en.html
20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
11765 vdb-entry