CVE-2004-2278

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors.

Ссылки

http://chaogic.com/vhost/ChangeLog.txt
http://secunia.com/advisories/11113
Patch
Vendor Advisory
http://securitytracker.com/id?1009404
Patch
http://www.osvdb.org/4207
Patch
http://www.securityfocus.com/bid/9860
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15446
http://chaogic.com/vhost/ChangeLog.txt
http://secunia.com/advisories/11113
Patch
Vendor Advisory
http://securitytracker.com/id?1009404
Patch
http://www.osvdb.org/4207
Patch
http://www.securityfocus.com/bid/9860
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15446

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:chaogic_systems:vhost:3.00r1:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.00r2:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.00r3:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.00r4:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.00r5:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.00r6:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.01r1:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.02r1:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.02r2:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.03r1:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.04r1:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.05r1:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.05r2:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.05r3:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.05r4:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.05r5:*:*:*:*:*:*:*

cpe:2.3:a:chaogic_systems:vhost:3.05r6:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.0054

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7jr2-5wcw-ghq8

github

почти 4 года назад