5.8
CVE-2003-1238
- EPSS 2.09%
- Veröffentlicht 31.12.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:03:46
- Erkennungen
Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nuked-klan ≫ Nuked-klan Version 1.2
Nuked-klan ≫ Nuked-klan Version 1.2_beta
Nuked-klan ≫ Nuked-klan Version 1.3
Nuked-klan ≫ Nuked-klan Version 1.3_beta
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.09% | 0.792 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html
http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html
http://www.iss.net/security_center/static/11420.php
http://www.securityfocus.com/bid/6916