Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0310
livejournal
xss
vulnerability
remote attackers
javascript
stylesheet
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.8%
Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does not strip the semicolon or parentheses, as demonstrated using a background:url.
Affected configurations
Node
livejournallivejournal
| CPE | Name | Operator | Version |
|---|---|---|---|
| livejournal:livejournal | livejournal | eq | * |
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.8%
Related for CVE-2004-0310