CVEvulnerability
CVE-2004-1645
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-08-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.
Affected configurations
• jerod moemeka xedus 1.0
References
- http://marc.info/?l=bugtraq&m=109394018411394&w=2 marc.info
- http://secunia.com/advisories/12418 Exploit, Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00047-08302004 www.gulftech.org
- http://www.securityfocus.com/bid/11071 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17166 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109394018411394&w=2 marc.info
- http://secunia.com/advisories/12418 Exploit, Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00047-08302004 www.gulftech.org
- http://www.securityfocus.com/bid/11071 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17166 exchange.xforce.ibmcloud.com