PT-2002-2529 · Phpwebsite · Phpwebsite

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1807

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpWebSite version 0.8.3

Description The issue allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag, which can lead to cross-site scripting (XSS) attacks.

Recommendations For phpWebSite version 0.8.3, consider disabling the ability to inject Javascript in IMG tags until a patch is available. Restrict access to areas where user-inputted HTML is processed to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1807

Affected Products

Phpwebsite

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html · Exploit
• 🔥 http://securityfocus.com/bid/5802 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1807 · Security Note
• http://iss.net/security_center/static/10173.php · Note