Lucene search
HistoryFeb 19, 2005 - 5:00 a.m.
CVE-2004-1537
cve
2004
1537
cross-site scripting
xss
popup.php
phpkit 1.6.03
phpkit 1.6.1
remote attackers
arbitrary web script
img parameter
6.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.2%
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter.
Affected configurations
Node
phpkitphpkitMatch1.6.1
ORphpkitphpkitMatch1.6.02
ORphpkitphpkitMatch1.6.03
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpkit:phpkit | phpkit | eq | 1.6.1 |
| phpkit:phpkit | phpkit | eq | 1.6.02 |
| phpkit:phpkit | phpkit | eq | 1.6.03 |
Related
nvd
nvd
CVE-2004-1537
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-1537
2005-02-19 05:00:00
nessus
nessus
PHP-Kit <= 1.6.1 RC2 Multiple Vulnerabilities
2004-11-22 00:00:00
6.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.2%
Related for CVE-2004-1537