Lucene search
HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1659
cve
2004
1659
cross-site scripting
xss
cutenews 1.3.6
security vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
Affected configurations
Node
cutephpcutenewsMatch0.88
ORcutephpcutenewsMatch1.3
ORcutephpcutenewsMatch1.3.1
ORcutephpcutenewsMatch1.3.2
ORcutephpcutenewsMatch1.3.6
Related
openvas
openvas
CuteNews index.php XSS
2005-11-03 00:00:00
CuteNews index.php XSS
2005-11-03 00:00:00
nessus
nessus
CuteNews index.php mod Parameter XSS
2004-09-06 00:00:00
nvd
nvd
CVE-2004-1659
2004-09-02 04:00:00
cvelist
cvelist
CVE-2004-1659
2005-02-20 05:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2004-1659