CVE-2003-1241

Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.php via script injected into the pseudo, email, and message parameters.

• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0089.htmlExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/312762Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/6906
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0089.htmlExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/312762Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/6906

Published

Dec 31, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-1235BRW WebWeaver 1.03 allows remote attackers to obtain sensiti…
• CVE-2003-1236Multiple format string vulnerabilities in the logger functio…
• CVE-2003-1237Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1…
• CVE-2003-1238Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 b…
• CVE-2003-1239Directory traversal vulnerability in sendphoto.php in WihPho…
• CVE-2003-1240PHP remote file inclusion vulnerability in CuteNews 0.88 all…
• CVE-2003-1242Sage 1.0 b3 allows remote attackers to obtain the root web s…
• CVE-2003-1243Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allo…
• CVE-2003-1244SQL injection vulnerability in page_header.php in phpBB 2.0,…
• CVE-2003-1245index2.php in Mambo 4.0.12 allows remote attackers to gain a…
• CVE-2003-1246NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protect…
• CVE-2003-1247Multiple buffer overflows in H-Sphere WebShell 2.3 allow rem…