VDB
CVE-2003-0736
CVE-2003-0736
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules.
EPSS 4.97% · 89.9th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
4.97%
89.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| phpwebsite | phpwebsite | 0 |
| n/a | n/a | * |
Timeline
- Sep 4, 2003 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 20030902 GLSA: phpwebsite (200309-03) mailing-list
- VU#664422 third-party-advisory
- 20030810 phpWebSite SQL Injection & DoS & XSS Vulnerabilities mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2003-0736 advisory