CVEvulnerability

CVE-2004-2603

4.3 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php.

Affected configurations

• ubertec help center live 1.0 • ubertec help center live 1.2 • ubertec help center live 1.2.1 • ubertec help center live 1.2.2 • ubertec help center live 1.2.3 • ubertec help center live 1.2.4 • ubertec help center live 1.2.5 • ubertec help center live 1.2.6

References

http://secunia.com/advisories/13652 Vendor Advisory
http://securitytracker.com/id?1012685 Exploit
http://www.gulftech.org/?node=research&article_id=00058-12242004 www.gulftech.org
http://www.osvdb.org/12597 Exploit
http://www.securityfocus.com/bid/12105 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18696 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/13652 Vendor Advisory
http://securitytracker.com/id?1012685 Exploit
http://www.gulftech.org/?node=research&article_id=00058-12242004 www.gulftech.org
http://www.osvdb.org/12597 Exploit
http://www.securityfocus.com/bid/12105 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18696 exchange.xforce.ibmcloud.com