CVE-2004-2031

Опубликовано: 21 мая 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.

Ссылки

http://marc.info/?l=bugtraq&m=108541119526279&w=2
http://secunia.com/advisories/11696
Vendor Advisory
http://www.osvdb.org/6410
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/10405
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16241
http://marc.info/?l=bugtraq&m=108541119526279&w=2
http://secunia.com/advisories/11696
Vendor Advisory
http://www.osvdb.org/6410
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/10405
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16241

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00565

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g6r8-pjqh-f6qg

github

почти 4 года назад