MitreCVE-2003-1384CVE-2003-1384
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
87.3%
Cross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the (1) titre, (2) Votre pseudo, (3) Votre e-mail, or (4) Votre message fields.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| py_software | py-livredor | 1.0 | cpe:2.3:a:py_software:py-livredor:1.0:*:*:*:*:*:*:* |
References
archives.neohapsis.com/archives/vulnwatch/2003-q1/0102.html
cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00024.html
lists.grok.org.uk/pipermail/full-disclosure/2003-March/004015.html
www.security-corp.org/advisories/SCSA-008.txt
www.securityfocus.com/bid/6997
exchange.xforce.ibmcloud.com/vulnerabilities/11448
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
87.3%