medium4.3Public exploit code
CVE-2004-1935
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and oth…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SCT Campus Pipeline 1.0/2.x/3.x - Email Attachment Script Injection2004-04-15 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sct Corporation | Campus Pipeline | Versions 1.0, 2.0, 2.1, 2.2, 3.0, 3.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108207280917231&w=2
- http://secunia.com/advisories/11396
- http://www.securityfocus.com/bid/10154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15878
- http://marc.info/?l=bugtraq&m=108207280917231&w=2
- http://secunia.com/advisories/11396
- http://www.securityfocus.com/bid/10154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15878