medium6.8Public exploit code
CVE-2004-2670
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eNdonesia 8.3 - Search Form Cross-Site Scripting2004-08-04 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endonesia | Endonesia | Version 8.3 |
References
- NVD record
- CVE.org record
- http://echo.or.id/adv/adv02-y3dips-2004.txt
- http://secunia.com/advisories/12231
- http://securitytracker.com/id?1010864
- http://www.securityfocus.com/archive/1/370855
- http://www.securityfocus.com/bid/10856
- http://www.securityfocus.com/bid/8506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13041
- http://echo.or.id/adv/adv02-y3dips-2004.txt
- http://secunia.com/advisories/12231
- http://securitytracker.com/id?1010864
- http://www.securityfocus.com/archive/1/370855
- http://www.securityfocus.com/bid/10856
- http://www.securityfocus.com/bid/8506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13041