CVE-2003-1350: List Site Pro

Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days.

List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.

Affected products

• List Site Pro List Site Pro: version 2.0 only

Published 2003-12-31. Last modified 2026-06-16.