← Database

CVE-2004-1202

MEDIUM CVSS: 6.8 Published: 2005-01-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

Affected Platforms

Phpcms Phpcms

Weakness Type

NVD-CWE-Other

References