medium4.3Public exploit code
CVE-2003-1278
Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authenticatio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenTopic 2.3.1 - Private Message HTML Injection2003-01-06 · webapps · php · Verified
Impact
Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into IMG tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infopop | Opentopic | Version 2.3.1 |