CVE-2003-1238

MEDIUM 5.8CVE-2003-1238 · Published 31/12/2003 · updated 16/06/2026

In short

CVE-2003-1238 is a MEDIUM (CVSS 5.8) vulnerability affecting nuked-klan (nuked-klan).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nuked-klan nuked-klan	`= 1.2= 1.2_beta= 1.3= 1.3_beta`	No fix yet

Description

Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.

References

archives.neohapsis.com/archives/bugtraq/2003-02/0276.html · Exploit
archives.neohapsis.com/archives/bugtraq/2003-03/0275.html · Exploit
iss.net/security_center/static/11420.php
securityfocus.com/bid/6916 · Exploit

More vulnerabilities in nuked-klan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nuked-klan

= 1.2= 1.2_beta= 1.3= 1.3_beta

No fix yet

More vulnerabilities in nuked-klan

See all →