CVE-2004-1746 Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.
MediumCVSS 4.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php code snippet library | = 0.8 | No fix listed |
References
- 20040824 PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) mailing-list
- nikyt0x.webcindario.com
- 12370 third-party-advisory
- 11038 exploit vdb-entry
- snippet-index-xss(17108) vdb-entry