{"api_version":"1","generated_at":"2026-07-23T08:09:33+00:00","cve":"CVE-2003-1506","urls":{"html":"https://cve.report/CVE-2003-1506","api":"https://cve.report/api/cve/CVE-2003-1506.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2003-1506","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-1506"},"summary":{"title":"CVE-2003-1506","description":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://securityreason.com/securityalert/3299","name":"http://securityreason.com/securityalert/3299","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CXSecurity - IDS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/342577","name":"http://www.securityfocus.com/archive/1/342577","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus HOME Mailing List: BugTraq","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13507","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13507","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/342160","name":"http://www.securityfocus.com/archive/1/342160","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/342551","name":"http://www.securityfocus.com/archive/1/342551","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/8876","name":"http://www.securityfocus.com/bid/8876","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"DansGuardian Denied URL Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-1506","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1506","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2003","cve_id":"1506","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"daniel_barron","cpe5":"dansguardian","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"1506","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"daniel_barron","cpe5":"dansguardian","cpe6":"3.1_r5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"1506","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"daniel_barron","cpe5":"dansguardian","cpe6":"3.1_r6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"1506","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"daniel_barron","cpe5":"dansguardian","cpe6":"3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T02:28:03.857Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"3299","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3299"},{"name":"20031022 CensorNet: Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/342160"},{"name":"20031027 Re: CensorNet: Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/342577"},{"name":"censornet-cgi-xss(13507)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13507"},{"name":"20031027 Re: CensorNet: Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/342551"},{"name":"8876","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/8876"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2003-10-22T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"3299","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3299"},{"name":"20031022 CensorNet: Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/342160"},{"name":"20031027 Re: CensorNet: Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/342577"},{"name":"censornet-cgi-xss(13507)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13507"},{"name":"20031027 Re: CensorNet: Cross Site Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/342551"},{"name":"8876","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/8876"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-1506","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"3299","refsource":"SREASON","url":"http://securityreason.com/securityalert/3299"},{"name":"20031022 CensorNet: Cross Site Scripting Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/342160"},{"name":"20031027 Re: CensorNet: Cross Site Scripting Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/342577"},{"name":"censornet-cgi-xss(13507)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13507"},{"name":"20031027 Re: CensorNet: Cross Site Scripting Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/342551"},{"name":"8876","refsource":"BID","url":"http://www.securityfocus.com/bid/8876"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2003-1506","datePublished":"2007-10-25T19:00:00.000Z","dateReserved":"2007-10-25T00:00:00.000Z","dateUpdated":"2024-08-08T02:28:03.857Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:3.0:*:*:*:*:*:*:*","matchCriteriaId":"989B1A00-289A-4134-AA2E-E21A5CF04100"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:3.1_r5:*:*:*:*:*:*:*","matchCriteriaId":"62D14A87-775B-4A0F-85FF-30F9F3B37760"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:3.1_r6:*:*:*:*:*:*:*","matchCriteriaId":"CE03AB34-7A78-429B-B8A6-477CB83AF102"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:3.2:*:*:*:*:*:*:*","matchCriteriaId":"E42B7902-BE62-4F79-8B7A-105FEA142DFB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2003","CveId":"1506","Ordinal":"1","Title":"CVE-2003-1506","CVE":"CVE-2003-1506","Year":"2003"},"notes":[{"CveYear":"2003","CveId":"1506","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.","Type":"Description","Title":"CVE-2003-1506"},{"CveYear":"2003","CveId":"1506","Ordinal":"2","NoteData":"2007-10-25","Type":"Other","Title":"Published"},{"CveYear":"2003","CveId":"1506","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}