CVE-2003-0980 Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" pa...
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freescripts visitorbook | = le | No fix listed |
References
- 20031210 Visitorbook LE Multiple Vulnerabilities mailing-list
- www.westpoint.ltd.uk patch vendor-advisory