Lucene search
HistoryAug 28, 2004 - 4:00 a.m.
CVE-2004-1640
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.1%
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.
Affected configurations
Node
xoopsxoops_dictionaryMatch0.94
ORxoopsxoops_dictionaryMatch1.0
Related
cve
cve
CVE-2004-1640
2005-02-20 05:00:00
cvelist
cvelist
CVE-2004-1640
2005-02-20 05:00:00
nessus
nessus
XOOPS <= 1.0 Dictionary Module Multiple Scripts XSS
2004-09-01 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.1%
Related for NVD:CVE-2004-1640