Back
CVE-2003-1145
Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.
Published: Nov 3, 2003
Modified: Jun 16, 2026
CVSS Metrics
GitHub Security Advisory GHSA-gcvw-22f5-2wvr
Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows...
References (10)
- http://secunia.com/advisories/10138 Exploit, Vendor Advisory
- http://www.osvdb.org/2767 Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/343806 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8972 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13604
- http://secunia.com/advisories/10138 Exploit, Vendor Advisory
- http://www.osvdb.org/2767 Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/343806 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8972 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13604
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
4.22%
Top 10% most likely to be exploited
Threat Score
28.5 / 100
Data Sources
NVD
EPSS
GitHub