CVE-2004-2688 - Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter

Published Oct 6, 2007

4.3

MEDIUM

CVSS 2.0

EPSS 1.03%

Description

Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/11346
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/alerts/2004/Apr/1009740.html
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2678
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15837
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/11346		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/alerts/2004/Apr/1009740.html		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2678		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15837		vdb-entryx_refsource_XF