medium4.3Public exploit code
CVE-2002-2178
Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpWebSite 0.8.3 - 'article.php' Cross-Site Scripting2002-10-02 · webapps · php · Verified
- phpWebSite 0.8.3 - News Message HTML Injection2002-09-25 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpwebsite | Phpwebsite | Version 0.8.3 |