CVE-2004-1599 Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coolphpweb portal | = 1.0_stable | No fix listed |
References
- 20041016 Multiple Vulnerabilities in CoolPHP mailing-list
- 12850 exploit third-party-advisory vendor-advisory
- 1011748 exploit vdb-entry vendor-advisory
- 11437 exploit vdb-entry vendor-advisory
- coolphp-multiple-xss(17742) vdb-entry