CVE-2004-1202 Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the fil...
MediumCVSS 6.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpcms | = 1.1.9 | No fix listed |
| phpcms | = 1.2 | No fix listed |
| phpcms | = 1.2.1 | No fix listed |
References
- 20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list patch
- 20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
- www.phpcms.de patch
- 11765 exploit patch vdb-entry
- phpcms-parser-xss(18272) vdb-entry