Lucene search
HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1640
cve-2004-1640
xss
xoops
web script
html
security vulnerability
remote attack
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.1%
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.
Affected configurations
Node
xoopsxoops_dictionaryMatch0.94
ORxoopsxoops_dictionaryMatch1.0
Related
cvelist
cvelist
CVE-2004-1640
2005-02-20 05:00:00
nvd
nvd
CVE-2004-1640
2004-08-28 04:00:00
nessus
nessus
XOOPS <= 1.0 Dictionary Module Multiple Scripts XSS
2004-09-01 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.1%
Related for CVE-2004-1640