Unscored severity · published Dec 31, 2003
CVE-2003-1534
Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3)…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
Guestbook · Justice Media
through 1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1534
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1534
Vendor Advisory
http://secunia.com/advisories/8475
Exploit
http://securityreason.com/securityalert/3347
www.securityfocus.com
http://www.securityfocus.com/archive/1/316745/30/25280/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/7233
www.securitytracker.com
http://www.securitytracker.com/id?1006412
More from Guestbook
–
CVE-2003-1535
Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message