CVE-2004-1202

2004-12-1505:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.689

Percentile

98.0%

JSON

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

References

lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html

marc.info/?l=bugtraq&m=110149207123510&w=2

www.phpcms.de/download/index.en.html

www.securityfocus.com/bid/11765

exchange.xforce.ibmcloud.com/vulnerabilities/18272