Lucene search
HistoryOct 14, 2007 - 7:00 p.m.
CVE-2003-1350
list site pro
remote attackers
hijack
user accounts
cve-2003-1350
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a “|” (pipe), which is used as a field delimiter, into the bannerurl field.
Affected configurations
Node
list_site_prolist_site_proMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| list_site_pro:list_site_pro | list site pro | eq | 2.0 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
Related for CVE-2003-1350