CVE-2004-1735

Опубликовано: 21 авг. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.

Ссылки

http://marc.info/?l=bugtraq&m=109312475207604&w=2
http://secunia.com/advisories/12339
Vendor Advisory
http://www.securityfocus.com/bid/10992
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17057
http://marc.info/?l=bugtraq&m=109312475207604&w=2
http://secunia.com/advisories/12339
Vendor Advisory
http://www.securityfocus.com/bid/10992
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17057

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sympa:sympa:4.0:*:*:*:*:*:*:*

cpe:2.3:a:sympa:sympa:4.1:*:*:*:*:*:*:*

cpe:2.3:a:sympa:sympa:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:sympa:sympa:4.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03931

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1735

ubuntu

около 21 года назад

Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.

CVE-2004-1735

debian

около 21 года назад

Cross-site scripting (XSS) vulnerability in the create list option in ...

GHSA-jj5f-c84c-p5jc

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.

EPSS

Процентиль: 88%

0.03931

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other