Lucene search
HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1640
cve-2004-1640
xss
xoops
web script
html
security vulnerability
remote attack
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0.008
Percentile
82.1%
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.
Affected configurations
Node
xoopsxoops_dictionaryMatch0.94
ORxoopsxoops_dictionaryMatch1.0
Related
cvelist
cvelist
CVE-2004-1640
2005-02-20 05:00:00
nvd
nvd
CVE-2004-1640
2004-08-28 04:00:00
nessus
nessus
XOOPS <= 1.0 Dictionary Module Multiple Scripts XSS
2004-09-01 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0.008
Percentile
82.1%
Related for CVE-2004-1640