CVE-2003-1347

The provided text describes a cross-site scripting (XSS) vulnerability in Geeklog's 'users.php' script due to insufficient input sanitization. An attacker can craft a malicious URL containing script code, which executes in the context of a victim's browser when visited.

The provided text describes a cross-site scripting (XSS) vulnerability in Geeklog's 'profiles.php' script due to insufficient input sanitization. It includes example URLs demonstrating how an attacker could inject malicious script code via URI parameters.

This exploit demonstrates an HTML injection vulnerability in Geeklog's user account 'Homepage' field, allowing arbitrary script execution in the context of the victim's browser. The provided payload triggers a JavaScript alert with the document cookie when the mouse hovers over the injected link.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Geeklog's comment.php script due to insufficient input sanitization. An attacker can craft a malicious URL containing JavaScript code, which executes in the context of a victim's browser when visited.