CVE-2003-1554

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.

Affected products

Scoznet Scozbook: 1.1_beta

References

http://secunia.com/advisories/8476
http://securityreason.com/securityalert/3781
http://www.securityfocus.com/archive/1/316747/30/25280/threaded
http://www.securityfocus.com/bid/7235
http://www.securitytracker.com/id?1006413
https://exchange.xforce.ibmcloud.com/vulnerabilities/11658
http://secunia.com/advisories/8476
http://securityreason.com/securityalert/3781
http://www.securityfocus.com/archive/1/316747/30/25280/threaded
http://www.securityfocus.com/bid/7235
http://www.securitytracker.com/id?1006413
https://exchange.xforce.ibmcloud.com/vulnerabilities/11658

Get alerted when CVE-2003-1554 or the next vulnerability affects your stack