CVE-2003-1136

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/10080Exploit, Vendor Advisory
http://securitytracker.com/id?1008006Exploit, Vendor Advisory
http://www.osvdb.org/2718Vendor Advisory
http://www.securityfocus.com/archive/1/342475Exploit, Vendor Advisory
http://www.securityfocus.com/bid/8895Vendor Advisory
http://www.securityfocus.com/bid/8896Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13522
https://exchange.xforce.ibmcloud.com/vulnerabilities/13523
http://secunia.com/advisories/10080Exploit, Vendor Advisory
http://securitytracker.com/id?1008006Exploit, Vendor Advisory
http://www.osvdb.org/2718Vendor Advisory
http://www.securityfocus.com/archive/1/342475Exploit, Vendor Advisory
http://www.securityfocus.com/bid/8895Vendor Advisory
http://www.securityfocus.com/bid/8896Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13522
https://exchange.xforce.ibmcloud.com/vulnerabilities/13523

Timeline

Published: Oct 23, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-11375.0Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that cont CVE-2003-11385.0The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if a CVE-2003-11395.0Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the result CVE-2003-114010.0Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file.CVE-2003-11417.5Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.CVE-2003-114210.0Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain pri CVE-2003-11437.5Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attacke CVE-2003-114410.0Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via CVE-2003-11456.8Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script CVE-2003-11466.8Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or H CVE-2003-11487.5Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.CVE-2003-11494.3Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web