What’s Vulnerable › Vulnerabilities

CVE-2003-1238

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-12-31 · updated 2026-06-16

Description

Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.

Affected products

• Nuked-Klan: 1.2, 1.2_beta, 1.3, 1.3_beta

References

• http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html
• http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html
• http://www.iss.net/security_center/static/11420.php
• http://www.securityfocus.com/bid/6916
• http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html
• http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html
• http://www.iss.net/security_center/static/11420.php
• http://www.securityfocus.com/bid/6916

Get alerted when CVE-2003-1238 or the next vulnerability affects your stack