CVEvulnerability
CVE-2004-1512
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.
Affected configurations
• soft3304 04webserver 1.42
References
- http://marc.info/?l=bugtraq&m=110012542615484&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110054395311823&w=2 marc.info
- http://secunia.com/advisories/13159/ Vendor Advisory
- http://www.security.org.sg/vuln/04webserver142.html Patch
- http://www.securityfocus.com/bid/11652 Exploit, Patch
- http://www.soft3304.net/04WebServer/Security.html www.soft3304.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18033 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=110012542615484&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110054395311823&w=2 marc.info
- http://secunia.com/advisories/13159/ Vendor Advisory
- http://www.security.org.sg/vuln/04webserver142.html Patch
- http://www.securityfocus.com/bid/11652 Exploit, Patch
- http://www.soft3304.net/04WebServer/Security.html www.soft3304.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18033 exchange.xforce.ibmcloud.com