Published: 06/08/2004 Updated: 11/07/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 705

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote malicious users to inject arbitrary script or HTML via the id parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cutephp cutenews 0.88
cutephp cutenews 1.3
cutephp cutenews 1.3.1

source: wwwsecurityfocuscom/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities These issues are due to a failure of the application to properly sanitize user-supplied URI input The problems present themselves when malicious HTML and script code is sent to the application through the ...

source: wwwsecurityfocuscom/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities These issues are due to a failure of the application to properly sanitize user-supplied URI input The problems present themselves when malicious HTML and script code is sent to the application through t ...

source: wwwsecurityfocuscom/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability The vulnerability exists due to insufficient sanitization of user-supplied input Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML code An attacker can exploit this vulnerability by ...

source: wwwsecurityfocuscom/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability This issue is due to a failure of the application to properly sanitize user-supplied URI input This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code I ...

source: wwwsecurityfocuscom/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities These issues are due to a failure of the application to properly sanitize user-supplied URI input The problems present themselves when malicious HTML and script code is sent to the application through ...

NVD-CWE-Other http://www.swp-zone.org/archivos/advisory-06.txt http://marc.info/?l=bugtraq&m=108844000409449&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/16525 https://nvd.nist.gov https://www.exploit-db.com/exploits/24238/

CVE-2004-0660

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect