{"id":"CVE-2003-1506","aliases":["EUVD-2003-1496","GHSA-3mq7-3ggv-qpgc"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2...","description":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01734,"percentile":0.77781,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:33Z","exploits":[{"source":"exploitdb","id":"EDB-23275","title":"DansGuardian 2.2.x - Denied URL Cross-Site Scripting","type":"webapps","platform":"cgi","date":"2003-10-22","verified":true,"url":"https://www.exploit-db.com/exploits/23275"}],"products":[{"vendor":"daniel_barron","product":"dansguardian"}],"references":[{"url":"http://securityreason.com/securityalert/3299","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/342160","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/342577","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13507","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/342551","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/8876","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1506"},{"url":"https://github.com/advisories/GHSA-3mq7-3ggv-qpgc"}],"sources":{"cve":[{"id":"CVE-2003-1506","description":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","status":"published","published":"2007-10-25T19:00:00Z","modified":"2024-08-08T02:28:03.857Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-1496","description":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","status":"published","published":"2007-10-25T19:00:00Z","modified":"2024-08-08T02:28:03Z","updated_at":"2026-11-03T01:15:02.977959Z"}],"ghsa":[{"id":"GHSA-3mq7-3ggv-qpgc","title":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2...","description":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","status":"published","published":"2022-04-29T01:28:11Z","modified":"2023-01-30T05:02:21Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:46:37.149934Z"}],"nvd":[{"id":"CVE-2003-1506","description":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","status":"published","published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:33.647Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}