CVE-2003-1271

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.iss.net/security_center/static/10977.php
http://www.securityfocus.com/archive/1/305234Exploit, Vendor Advisory
http://www.securityfocus.com/bid/6529Exploit, Patch
http://www.iss.net/security_center/static/10977.php
http://www.securityfocus.com/archive/1/305234Exploit, Vendor Advisory
http://www.securityfocus.com/bid/6529Exploit, Patch

Timeline

Published: Dec 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-12729.3Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CVE-2003-12732.1Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a playlist name that contains some non-English CVE-2003-12745.0Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that CVE-2003-12755.0Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript function that uses the obje CVE-2003-12764.6Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEY_CURRENT_USER\CVE-2003-12774.3Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute arbitrary script as CVE-2003-12784.3Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly CVE-2003-12794.6S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) /tmp/__F8499 by Sqpe,CVE-2003-12805.0Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. (dot dot) in mult CVE-2003-12812.1cgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain temporary files.CVE-2003-12825.0IBM Net.Data allows remote attackers to obtain sensitive information such as path names, server names and possibly user names and passwords CVE-2003-12837.5KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers