CVE-2002-2178 in phpWebSite

Summary

Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 11/16/2005
• Disclosure: 12/31/2002
• Moderation: VulDB entry created
• Entries: VDB-19820 (1)
• CPE: ready
• CWE: CWE-80 (Confirmed)
• Exploit: Download
• CVSS: 4.3
• EPSS: 0.00467
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2178
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2178
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2178/