medium4.3Public exploit code
CVE-2004-0678
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 12Planet Chat Server 2.9 - Cross-Site Scripting2004-07-05 · remote · multiple · Verified
Impact
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 12planet | Chat Server | Version 2.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108904648728706&w=2
- http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt
- http://www.securityfocus.com/bid/10659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16605
- http://marc.info/?l=bugtraq&m=108904648728706&w=2
- http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt
- http://www.securityfocus.com/bid/10659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16605