Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html)…
Priority LOW 26Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.
Why it matters now
EPSS 0.03726 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mirabilis:icq:2003a_build3777:*:*:*:*:*:*:* | 2003a_build3777 | Vulnerable | Mirabilis |
| cpe:2.3:a:mirabilis:icq:2003a_build3799:*:*:*:*:*:*:* | 2003a_build3799 | Vulnerable | Mirabilis |
| cpe:2.3:a:mirabilis:icq:2003a_build3800:*:*:*:*:*:*:* | 2003a_build3800 | Vulnerable | Mirabilis |
- cpe:2.3:a:mirabilis:icq:2003a_build3777:*:*:*:*:*:*:* Versions 2003a_build3777 Vulnerable ·Mirabilis
- cpe:2.3:a:mirabilis:icq:2003a_build3799:*:*:*:*:*:*:* Versions 2003a_build3799 Vulnerable ·Mirabilis
- cpe:2.3:a:mirabilis:icq:2003a_build3800:*:*:*:*:*:*:* Versions 2003a_build3800 Vulnerable ·Mirabilis
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2003-0769
- 2026-10-03 Alias added: GHSA-6m9j-7xqg-2365
References
—
More Mirabilis Icq vulnerabilities
- TI-2000-00046 Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via… CVSS 2.0HIGH 7.5
- TI-2006-04508 Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build… CVSS 2.0HIGH 7.5
- TI-2002-00025 Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to… CVSS 2.0HIGH 7.5
- TI-2003-00218 Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote… CVSS 2.0HIGH 7.5
- TI-2002-02241 ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service… CVSS 2.0HIGH 7.8
- TI-2003-00217 Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote… CVSS 2.0HIGH 7.5
Sources
- CVE-2003-0769 · CVE Program
- CVE-2003-0769 · NVD
- FIRST EPSS
- GHSA-6m9j-7xqg-2365 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences