medium6.8Public exploit code
CVE-2004-1210
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IPCop 1.4.1 - Web Administration Interface Proxy Log HTML Injection2004-11-30 · webapps · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipcop | Ipcop | Version 1.4.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110197682705001&w=2
- http://www.kurczaba.com/html/security/0411291.htm
- http://www.securityfocus.com/bid/11779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18301
- http://marc.info/?l=bugtraq&m=110197682705001&w=2
- http://www.kurczaba.com/html/security/0411291.htm
- http://www.securityfocus.com/bid/11779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18301