PHP Code Snippet Library 0.8 - Multiple Cross-Site Scripting Vulnerabilities

🗓️ 24 Aug 2004 00:00:00Reported by Nikyt0x ArgentinaType

exploitdb🔗 www.exploit-db.com👁 171 Views

Multiple cross-site scripting vulnerabilities in PHP Code Snippet Library due to improper URI sanitization.

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	PHP Code Snippet Library 'index.php' XSS	20 Aug 200400:00	–	nessus
Tenable Nessus	PHP Code Snippet Library index.php Multiple Parameter XSS	25 Aug 200400:00	–	nessus
CVE	CVE-2004-1746	26 Feb 200505:00	–	cve
Cvelist	CVE-2004-1746	26 Feb 200505:00	–	cvelist
EUVD	EUVD-2004-1740	7 Oct 202500:30	–	euvd
NVD	CVE-2004-1746	31 Dec 200405:00	–	nvd

source: https://www.securityfocus.com/bid/11038/info

PHP Code Snippet Library is reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input.

These issues could permit a remote attacker to create a malicious URI link to the PHP Code Snippet Library site that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/[path]/index.php?cat_select=[XSS]
http://www.example.com/[path]/index.php?cat_select=[XSS]&show=[XSS]

27 Jan 2013 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.03596