Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2008-03-26T17:00:00
Updated: 2024-08-08T02:35:16.383Z
Reserved: 2008-03-26T00:00:00
Link: CVE-2003-1554

No data.

Status : Modified
Published: 2003-12-31T05:00:00.000
Modified: 2024-11-20T23:47:25.637
Link: CVE-2003-1554

No data.