CVE-2003-1149

2005-05-1004:00:00

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page.

References

secunia.com/advisories/10067

securityresponse.symantec.com/avcenter/security/Content/2003.10.27.html

www.osvdb.org/2714

www.securityfocus.com/archive/1/342548

www.securityfocus.com/bid/8904

exchange.xforce.ibmcloud.com/vulnerabilities/13528