medium4.3Public exploit code
CVE-2004-1645
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Xedus Web Server 1.0 - testgetrequest.x 'Username' Cross-Site Scripting2004-09-30 · remote · windows · Verified
- Xedus Web Server 1.0 - test.x 'Username' Cross-Site Scripting2004-09-30 · remote · windows · Verified
Impact
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jerod Moemeka | Xedus | Version 1.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109394018411394&w=2
- http://secunia.com/advisories/12418
- http://www.gulftech.org/?node=research&article_id=00047-08302004
- http://www.securityfocus.com/bid/11071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17166
- http://marc.info/?l=bugtraq&m=109394018411394&w=2
- http://secunia.com/advisories/12418
- http://www.gulftech.org/?node=research&article_id=00047-08302004
- http://www.securityfocus.com/bid/11071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17166