CVE-2003-1204

State: Published
Severity: Not scored
Published: May 19, 2005
Updated: Aug 8, 2024
Reserved: May 19, 2005

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

7505vdb-entry
7501vdb-entry
7495vdb-entry
7502vdb-entry
7496vdb-entry
7498vdb-entry
mambo-multiple-scripts-xss(11050)vdb-entry
7500vdb-entry
6571vdb-entry
7499vdb-entry
7497vdb-entry
20030110 Mambo Site Server Remote Code Executionmailing-list
7504vdb-entry
7503vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.