3 matches found
CVE-2004-1594
CVE-2004-1594 is an XSS vulnerability in FuseTalk 4.0 where an attacker can trigger arbitrary script execution via an image tag (img src). Public references (NVD/NIST, CVSS 2.0 base score 4.3) corroborate a web context with no authentication required and partial integrity impact. A Nessus NASL en...
CVE-2002-2166
CVE-2002-2166 is an XSS vulnerability reported in FuseTalk 2.0 and 3.0. The public records indicate that remote attackers could inject arbitrary HTML/script into pages, potentially affecting user data integrity without affecting confidentiality or availability per the CVSS metrics (base score 4.3...
CVE-2004-1994
FuseTalk 4.0 contains a vulnerability where remote attackers can ban other users by making a direct request to banning.cfm. The description confirms network-attack feasibility with partial availability impact but provides no specific exploit details, affected versions, root-cause analysis, or rem...