CVE-2002-1480: Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary H...

Security readout for executives and security teams

CVE-2002-1480 is a stored cross-site scripting issue in phpGB before 1.20. A malicious guestbook entry can run HTML or script when an administrator deletes it. The main business risk is compromise of an admin browser session in legacy public guestbook deployments. Exposure is likely limited to organizations still running phpGB versions earlier than 1.20, especially public guestbook pages with administrator moderation or deletion workflows. The source bundle lists affected vendor/product fields as n/a, so asset discovery must confirm actual phpGB usage. Treat this as a legacy exposure cleanup item unless phpGB is internet-facing and actively administered. Prioritize upgrade or removal because the flaw targets administrators and the software is very old, but the provided sources do not prove active exploitation. Mitigation focus: Upgrade phpGB instances older than 1.20, or retire them if unsupported.; Check vendor or maintainer guidance before applying code-level fixes.; Restrict administrator access to trusted networks where feasible..

Prepared

Jul 1, 2026, 02:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.