Security Vulnerabilities, CVEs, Published In October 2003 (XSS)
Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread.
Max CVSS
6.8
EPSS Score
2.27%
Published
2003-10-30
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message.
Max CVSS
6.8
EPSS Score
1.05%
Published
2003-10-30
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page.
Max CVSS
4.3
EPSS Score
0.54%
Published
2003-10-28
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page.
Max CVSS
4.3
EPSS Score
0.20%
Published
2003-10-27
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL.
Max CVSS
4.3
EPSS Score
0.72%
Published
2003-10-23
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
Max CVSS
4.3
EPSS Score
0.12%
Published
2003-10-06
Updated
2008-09-10
Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.
Max CVSS
6.8
EPSS Score
94.51%
Published
2003-10-20
Updated
2008-09-05
Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules.
Max CVSS
6.8
EPSS Score
0.70%
Published
2003-10-20
Updated
2016-10-18
Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.
Max CVSS
6.8
EPSS Score
0.19%
Published
2003-10-20
Updated
2008-09-05
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Max CVSS
6.8
EPSS Score
0.71%
Published
2003-10-06
Updated
2019-03-25
10 vulnerabilities found