high7.5Public exploit code
CVE-2002-0959
Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Splatt Forum 3.0 - Image Tag HTML Injection2002-06-06 · webapps · php · Verified
Impact
Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splatt | Splatt Forum | Version 3.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0091.html
- http://online.securityfocus.com/archive/1/275744
- http://www.iss.net/security_center/static/9279.php
- http://www.securityfocus.com/bid/4953
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0091.html
- http://online.securityfocus.com/archive/1/275744
- http://www.iss.net/security_center/static/9279.php
- http://www.securityfocus.com/bid/4953