Lucene search

K
cve[email protected]CVE-2004-2122
HistoryMay 27, 2005 - 4:00 a.m.

CVE-2004-2122

2005-05-2704:00:00
web.nvd.nist.gov
21
cve
2004
2122
xss
vulnerability
intraforum_db.cgi
intra forum
web script
html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the (1) use_last_read or (2) forum parameters.

Affected configurations

NVD
Node
intra_forumintra_forum
CPENameOperatorVersion
intra_forum:intra_forumintra forumeq*

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

Related for CVE-2004-2122