Unscored CVE-2004-2688 EUVD-2004-2678GHSA-37j4-jj4f-rgwh

Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat…

Published Oct 6, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358.

References

11346 third-party-advisory
1009740 vdb-entry
newsphp-index-xss(15837) vdb-entry
20040415 Re: XSS, Admin Access via Cookie and File Upload vulnerability in NewsPHP. mailing-list