# CVE-2003-1347

## Summary

- **CVE ID:** CVE-2003-1347
- **Severity:** UNKNOWN
- **CVSS Score:** 0.05
- **CWE:** N/A
- **Published:** Oct 14, 2007
- **Last Modified:** Mar 16, 2026

## Description

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.geeklog.net/filemgmt/visit.php?lid=101)
- [CNA](http://www.securityfocus.com/bid/6602)
- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/11075)
- [CNA](http://www.securityfocus.com/bid/6603)
- [CNA](http://www.securityfocus.com/bid/6604)
- [CNA](http://www.securityfocus.com/archive/1/306770)
- [CNA](http://www.securityfocus.com/bid/6601)
- [CNA](http://securityreason.com/securityalert/3226)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 1.27%
- **EPSS Percentile:** 79.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-19._