Lucene search
HistoryMay 27, 2005 - 4:00 a.m.
CVE-2004-2096
cve-2004-2096
cross-site scripting
xss
mephistoles httpd
security vulnerability
remote attackers
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.4 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.6%
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.
Affected configurations
Node
mephistoles_internet_suitemephistoles_httpdMatch0.6_final
ORmephistoles_internet_suitemephistoles_httpdMatch0.6_p1
ORmephistoles_internet_suitemephistoles_httpdMatch0.6_p2
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.4 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2004-2096