Lucene search

MitreCVE-2004-2017

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-2017

2005-05-1004:00:00

mitre

web.nvd.nist.gov

cve-2004-2017

cross-site scripting

xss

security vulnerabilities

turbo traffic trader c

ttt-c 1.0

remote attackers

injection attacks

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.012

Percentile

84.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header in a GET request to ttt-in, (3) the Referer header in a GET request to ttt-in, or the (4) site name or (5) site URL fields in the main control panel.

Affected configurations

Nvd

Node

turbotraffictraderturbotraffictrader_cMatch1.0

VendorProductVersionCPE
turbotraffictraderturbotraffictrader_c1.0cpe:2.3:a:turbotraffictrader:turbotraffictrader_c:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
turbotraffictrader	turbotraffictrader_c	1.0	cpe:2.3:a:turbotraffictrader:turbotraffictrader_c:1.0:::::::*

References

marc.info/?l=bugtraq&m=108481571131866&w=2

secunia.com/advisories/11623

www.icefire.org/security/ttt-bugreport.txt

www.osvdb.org/6339

www.osvdb.org/6340

www.osvdb.org/6341

www.osvdb.org/6342

www.osvdb.org/6343

www.osvdb.org/6344

www.securityfocus.com/bid/10359

exchange.xforce.ibmcloud.com/vulnerabilities/16164

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.012

Percentile

84.9%

JSON

Related for CVE-2004-2017