CVEvulnerability
CVE-2004-2725
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
Affected configurations
• aztek forum aztek forum 4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/13202 Vendor Advisory
- http://securitytracker.com/id?1012213 Exploit
- http://www.osvdb.org/11704 www.osvdb.org
- http://www.osvdb.org/11705 www.osvdb.org
- http://www.osvdb.org/11706 www.osvdb.org
- http://www.securityfocus.com/bid/11654 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18057 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13202 Vendor Advisory
- http://securitytracker.com/id?1012213 Exploit
- http://www.osvdb.org/11704 www.osvdb.org
- http://www.osvdb.org/11705 www.osvdb.org
- http://www.osvdb.org/11706 www.osvdb.org
- http://www.securityfocus.com/bid/11654 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18057 exchange.xforce.ibmcloud.com