{"id": "CVE-2004-0271", "bulletinFamily": "NVD", "title": "CVE-2004-0271", "description": "Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.\nThis vulnerability is addressed in the following product release:\r\nMaxWebPortal, MaxWebPortal, 1.32", "published": "2004-11-23T05:00:00", "modified": "2017-07-11T01:30:00", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2004-0271", "reporter": "cve@mitre.org", "references": ["http://www.securityfocus.com/bid/9625", "http://marc.info/?l=bugtraq&m=107643014606515&w=2", "https://exchange.xforce.ibmcloud.com/vulnerabilities/15122", "https://exchange.xforce.ibmcloud.com/vulnerabilities/15120"], "cvelist": ["CVE-2004-0271"], "type": "cve", "lastseen": "2019-05-29T18:08:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "74110c83b149b0ba9149800c130eb4ca"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "68884980db831870498f354201ddccfc"}, {"key": "cpe23", "hash": "b7e8c0a3641309bb2941b8f5eab14cef"}, {"key": "cvelist", "hash": "32c4252f769304d237931314fc8b6a60"}, {"key": "cvss", "hash": "4cac367be6dd8242802053610be9dee6"}, {"key": "cvss2", "hash": "1997a83d1164e580c617572d7a8583e2"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "184870579e870d794a2864846c18797b"}, {"key": "href", "hash": "b1fbccf3745faf628988051136c65e03"}, {"key": "modified", "hash": "d4139c3e94ad56ac445ba08d871e8a46"}, {"key": "published", "hash": "c2551a3b7dd7ca6b29d1a91670df7eed"}, {"key": "references", "hash": "2ca7e88d03eedeab1a21d516c222412c"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "5eed8c546520347e0bed2feccb51dffe"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "84ea1b1663ca07db64f532ec5a1fb67e6e4df00dfe7280d0159e55c544ae8325", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "exploitdb", "idList": ["EDB-ID:23677", "EDB-ID:23676"]}, {"type": "osvdb", "idList": ["OSVDB:3910", "OSVDB:3907", "OSVDB:3909", "OSVDB:15225"]}], "modified": "2019-05-29T18:08:02"}, "score": {"value": 6.2, "vector": "NONE", "modified": "2019-05-29T18:08:02"}, "vulnersScore": 6.2}, "objectVersion": "1.3", "cpe": ["cpe:/a:maxwebportal:maxwebportal:1.30", "cpe:/a:maxwebportal:maxwebportal:1.31"], "affectedSoftware": [{"name": "maxwebportal maxwebportal", "operator": "eq", "version": "1.30"}, {"name": "maxwebportal maxwebportal", "operator": "eq", "version": "1.31"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:maxwebportal:maxwebportal:1.31:*:*:*:*:*:*:*", "cpe:2.3:a:maxwebportal:maxwebportal:1.30:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}

{"exploitdb": [{"lastseen": "2016-02-02T21:33:02", "bulletinFamily": "exploit", "description": "MaxWebPortal 1.3x Personal Message SendTo Parameter XSS. CVE-2004-0271. Webapps exploit for asp platform", "modified": "2004-02-10T00:00:00", "published": "2004-02-10T00:00:00", "id": "EDB-ID:23677", "href": "https://www.exploit-db.com/exploits/23677/", "type": "exploitdb", "title": "MaxWebPortal 1.3x Personal Message SendTo Parameter XSS", "sourceData": "source: http://www.securityfocus.com/bid/9625/info\r\n \r\nIt has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection.\r\n \r\nMaxWebPortal versions prior to 1.32 have been reported to be prone to these issues.\r\n\r\n<select name=\"Avatar_URL\" size=\"4\" onChange =\"if (CheckNav(3.0,4.0)) URL.src=form.Avatar_URL.options[form.Avatar_URL.options.selectedIndex].value;\">\r\n<option value=\"javascript:alert(document.cookie)\">POC-Avatar</option></select>", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/23677/"}, {"lastseen": "2016-02-02T21:32:52", "bulletinFamily": "exploit", "description": "MaxWebPortal 1.3x down.asp HTTP_REFERER XSS. CVE-2004-0271. Webapps exploit for asp platform", "modified": "2004-02-10T00:00:00", "published": "2004-02-10T00:00:00", "id": "EDB-ID:23676", "href": "https://www.exploit-db.com/exploits/23676/", "type": "exploitdb", "title": "MaxWebPortal 1.3x down.asp HTTP_REFERER XSS", "sourceData": "source: http://www.securityfocus.com/bid/9625/info\r\n\r\nIt has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection.\r\n\r\nMaxWebPortal versions prior to 1.32 have been reported to be prone to these issues.\r\n\r\n<a href=\"<% =Request.ServerVariables(\"HTTP_REFERER\") %>\">Back</font></a></p>", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/23676/"}], "osvdb": [{"lastseen": "2017-04-28T13:19:58", "bulletinFamily": "software", "description": "## Vulnerability Description\nMaxWebPortal contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate \"sub_name\" variable upon submission to the \"dl_showall.asp\" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Solution Description\nUpgrade to version 1.32 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nMaxWebPortal contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate \"sub_name\" variable upon submission to the \"dl_showall.asp\" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## References:\nVendor URL: http://www.maxwebportal.com/\n[Secunia Advisory ID:10840](https://secuniaresearch.flexerasoftware.com/advisories/10840/)\n[Related OSVDB ID: 3909](https://vulners.com/osvdb/OSVDB:3909)\n[Related OSVDB ID: 3908](https://vulners.com/osvdb/OSVDB:3908)\n[Related OSVDB ID: 3907](https://vulners.com/osvdb/OSVDB:3907)\nOther Advisory URL: http://archives.neohapsis.com/archives/bugtraq/2004-02/0258.html\nISS X-Force ID: 15120\n[CVE-2004-0271](https://vulners.com/cve/CVE-2004-0271)\n", "modified": "2004-02-10T05:04:16", "published": "2004-02-10T05:04:16", "href": "https://vulners.com/osvdb/OSVDB:3910", "id": "OSVDB:3910", "type": "osvdb", "title": "MaxWebPortal dl_showall.asp sub_name Variable XSS", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:19:58", "bulletinFamily": "software", "description": "## Vulnerability Description\nMaxWebPortal contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate Avatar image file names upon submission to the register script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Solution Description\nUpgrade to version 1.32 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nMaxWebPortal contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate Avatar image file names upon submission to the register script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## References:\nVendor URL: http://www.maxwebportal.com/\n[Secunia Advisory ID:10840](https://secuniaresearch.flexerasoftware.com/advisories/10840/)\n[Related OSVDB ID: 3909](https://vulners.com/osvdb/OSVDB:3909)\n[Related OSVDB ID: 3908](https://vulners.com/osvdb/OSVDB:3908)\n[Related OSVDB ID: 3910](https://vulners.com/osvdb/OSVDB:3910)\nOther Advisory URL: http://archives.neohapsis.com/archives/bugtraq/2004-02/0258.html\nISS X-Force ID: 15120\n[CVE-2004-0271](https://vulners.com/cve/CVE-2004-0271)\n", "modified": "2004-02-10T05:04:16", "published": "2004-02-10T05:04:16", "href": "https://vulners.com/osvdb/OSVDB:3907", "id": "OSVDB:3907", "type": "osvdb", "title": "MaxWebPortal register Avatar File Name XSS", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:19:58", "bulletinFamily": "software", "description": "## Vulnerability Description\nMaxWebPortal contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate HTTP_REFERER upon submission to the down.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary HTML or script in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Solution Description\nUpgrade to version 1.32, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nMaxWebPortal contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate HTTP_REFERER upon submission to the down.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary HTML or script in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## References:\nVendor URL: http://www.maxwebportal.com/\n[Secunia Advisory ID:10840](https://secuniaresearch.flexerasoftware.com/advisories/10840/)\n[Related OSVDB ID: 3908](https://vulners.com/osvdb/OSVDB:3908)\n[Related OSVDB ID: 3907](https://vulners.com/osvdb/OSVDB:3907)\n[Related OSVDB ID: 3910](https://vulners.com/osvdb/OSVDB:3910)\nOther Advisory URL: http://archives.neohapsis.com/archives/bugtraq/2004-02/0258.html\nISS X-Force ID: 15120\n[CVE-2004-0271](https://vulners.com/cve/CVE-2004-0271)\nBugtraq ID: 9625\n", "modified": "2004-02-10T08:55:49", "published": "2004-02-10T08:55:49", "href": "https://vulners.com/osvdb/OSVDB:3909", "id": "OSVDB:3909", "type": "osvdb", "title": "MaxWebPortal down.asp HTTP_REFERER XSS", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:11", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\nMail List Post: http://marc.theaimsgroup.com/?l=bugtraq&m=107643014606515&w=2\nISS X-Force ID: 15122\n[CVE-2004-0271](https://vulners.com/cve/CVE-2004-0271)\nBugtraq ID: 9625\n", "modified": "2004-02-10T23:48:11", "published": "2004-02-10T23:48:11", "href": "https://vulners.com/osvdb/OSVDB:15225", "id": "OSVDB:15225", "title": "MaxWebPortal Personal Message SendTo Variable XSS", "type": "osvdb", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}