Vulnerability Details CVE-2004-1645
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://marc.info/?l=bugtraq&m=109394018411394&w=2
- http://secunia.com/advisories/12418
- http://www.gulftech.org/?node=research&article_id=00047-08302004
- http://www.securityfocus.com/bid/11071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17166
- http://marc.info/?l=bugtraq&m=109394018411394&w=2
- http://secunia.com/advisories/12418
- http://www.gulftech.org/?node=research&article_id=00047-08302004
- http://www.securityfocus.com/bid/11071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17166
Products affected by CVE-2004-1645
-
cpe:2.3:a:jerod_moemeka:xedus:1.0