Lucene search
HistorySep 02, 2004 - 4:00 a.m.
CVE-2004-1659
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
Affected configurations
Node
cutephpcutenewsMatch0.88
ORcutephpcutenewsMatch1.3
ORcutephpcutenewsMatch1.3.1
ORcutephpcutenewsMatch1.3.2
ORcutephpcutenewsMatch1.3.6
Related
openvas
openvas
CuteNews index.php XSS
2005-11-03 00:00:00
CuteNews index.php XSS
2005-11-03 00:00:00
cve
cve
CVE-2004-1659
2005-02-20 05:00:00
nessus
nessus
CuteNews index.php mod Parameter XSS
2004-09-06 00:00:00
cvelist
cvelist
CVE-2004-1659
2005-02-20 05:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Related for NVD:CVE-2004-1659