6.8
CVSSv2

CVE-2004-0660

Published: 06/08/2004 Updated: 11/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 705
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote malicious users to inject arbitrary script or HTML via the id parameter.

Affected Products

Vendor Product Versions
CutephpCutenews0.88, 1.3, 1.3.1

Exploits

source: wwwsecurityfocuscom/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability This issue is due to a failure of the application to properly sanitize user-supplied URI input This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code I ...
source: wwwsecurityfocuscom/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities These issues are due to a failure of the application to properly sanitize user-supplied URI input The problems present themselves when malicious HTML and script code is sent to the application through the ...
source: wwwsecurityfocuscom/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities These issues are due to a failure of the application to properly sanitize user-supplied URI input The problems present themselves when malicious HTML and script code is sent to the application through ...
source: wwwsecurityfocuscom/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability The vulnerability exists due to insufficient sanitization of user-supplied input Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML code An attacker can exploit this vulnerability by ...
source: wwwsecurityfocuscom/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities These issues are due to a failure of the application to properly sanitize user-supplied URI input The problems present themselves when malicious HTML and script code is sent to the application through t ...