Vulnerability Details CVE-2004-1146
Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 68.9%
CVSS Severity
CVSS v2 Score 4.3
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html
- http://marc.info/?l=bugtraq&m=110332469631253&w=2
- http://www.cvstrac.org/cvstrac/chngview?cn=320
- http://www.cvstrac.org/cvstrac/chngview?cn=321
- http://www.mikx.de/index.php?p=6
- http://www.securityfocus.com/bid/12017
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18726
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html
- http://marc.info/?l=bugtraq&m=110332469631253&w=2
- http://www.cvstrac.org/cvstrac/chngview?cn=320
- http://www.cvstrac.org/cvstrac/chngview?cn=321
- http://www.mikx.de/index.php?p=6
- http://www.securityfocus.com/bid/12017
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18726
Products affected by CVE-2004-1146
-
cpe:2.3:a:cvstrac:cvstrac:1.1
-
cpe:2.3:a:cvstrac:cvstrac:1.1.1
-
cpe:2.3:a:cvstrac:cvstrac:1.1.2
-
cpe:2.3:a:cvstrac:cvstrac:1.1.3
-
cpe:2.3:a:cvstrac:cvstrac:1.1.4