# CVE-2003-1372

## Summary

- **CVE ID:** CVE-2003-1372
- **Severity:** UNKNOWN
- **CVSS Score:** 0.02
- **CWE:** N/A
- **Published:** Oct 17, 2007
- **Last Modified:** Mar 16, 2026

## Description

Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/11376)
- [CNA](http://secunia.com/advisories/8125)
- [CNA](http://www.securityfocus.com/bid/6892)
- [CNA](http://www.osvdb.org/3931)
- [CNA](http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.59%
- **EPSS Percentile:** 68.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._