CVE-2004-2651

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html
Exploit
Vendor Advisory
http://securitytracker.com/id?1012686
Exploit
Patch
http://www.osvdb.org/12629
http://www.osvdb.org/12630
Exploit
Patch
http://www.securityfocus.com/bid/12104
Exploit
http://www.yacy.net/yacy/News.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18688
https://exchange.xforce.ibmcloud.com/vulnerabilities/18690
http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html
Exploit
Vendor Advisory
http://securitytracker.com/id?1012686
Exploit
Patch
http://www.osvdb.org/12629
http://www.osvdb.org/12630
Exploit
Patch
http://www.securityfocus.com/bid/12104
Exploit
http://www.yacy.net/yacy/News.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18688
https://exchange.xforce.ibmcloud.com/vulnerabilities/18690

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:*

cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00713

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cpj4-3r8w-83gx

github

почти 4 года назад