Lucene search

MitreCVE-2003-1187

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2003-1187

2005-05-1004:00:00

mitre

web.nvd.nist.gov

cve-2003-1187

cross-site scripting

xss vulnerability

include.php

phpkit 1.6.02

phpkit 1.6.03

remote attackers

web script

html

contact_email parameter

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.011

Percentile

84.1%

JSON

Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter.

Affected configurations

Nvd

Node

phpkitphpkitMatch1.6.02

phpkitphpkitMatch1.6.03

VendorProductVersionCPE
phpkitphpkit1.6.02cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*
phpkitphpkit1.6.03cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpkit	phpkit	1.6.02	cpe:2.3:a:phpkit:phpkit:1.6.02:::::::*
phpkit	phpkit	1.6.03	cpe:2.3:a:phpkit:phpkit:1.6.03:::::::*

References

badwebmasters.net/advisory/017/

lists.grok.org.uk/pipermail/full-disclosure/2003-November/013139.html

www.securityfocus.com/bid/8960

exchange.xforce.ibmcloud.com/vulnerabilities/13590

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.011

Percentile

84.1%

JSON

Related for CVE-2003-1187