CVE-2003-1243 Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter.

MediumCVSS 4.3 EPSS 3.5% Public exploit

Published: 2005-11-16 09:37
Updated: 2026-06-17 01:03
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter.

Affected products

No affected product data has been published yet.

References

20030219 XSS and Path Disclosure in Sage exploit mailing-list vendor-advisory
6894 exploit vdb-entry
sage-mod-xss(11371) vdb-entry

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.54% (percentile 89.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Sage 1.0 Beta 3 - Content Management System Cross-Site Scripting Exploit · Exploit Database (OffSec) · 2003-02-20