Vulnerability in Infopop Opentopic

CVE-2003-1278

Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into IMG tags.

EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.

Affected products

Infopop Opentopic — versions 2.3.1
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)