CVE-2004-2757

2007-11-2002:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

55.8%

JSON

Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter.

References

secunia.com/advisories/10653

support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm

www.securityfocus.com/bid/9412

exchange.xforce.ibmcloud.com/vulnerabilities/14873