Back
CVE-2003-1187
Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter.
Published: Nov 2, 2003
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| phpkit | phpkit | 1.6.02 |
| phpkit | phpkit | 1.6.03 |
GitHub Security Advisory GHSA-v7wx-qc33-8mj2
Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote...
References (8)
- http://badwebmasters.net/advisory/017/ Exploit, Vendor Advisory, URL Repurposed
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013139.html Vendor Advisory
- http://www.securityfocus.com/bid/8960 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13590
- http://badwebmasters.net/advisory/017/ Exploit, Vendor Advisory, URL Repurposed
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013139.html Vendor Advisory
- http://www.securityfocus.com/bid/8960 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13590
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
4.22%
Top 10% most likely to be exploited
Threat Score
28.5 / 100
Data Sources
NVD
EPSS
GitHub