Back
CVE-2003-1197
Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread.
Published: Oct 30, 2003
Modified: Jun 16, 2026
CVSS Metrics
GitHub Security Advisory GHSA-mmpm-jc9w-48vq
Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows...
References (10)
- http://secunia.com/advisories/10113 Exploit
- http://www.securityfocus.com/archive/1/342913 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8934 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13563
- http://secunia.com/advisories/10113 Exploit
- http://www.securityfocus.com/archive/1/342913 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8934 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13563
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
4.22%
Top 10% most likely to be exploited
Threat Score
28.5 / 100
Data Sources
NVD
EPSS
GitHub