medium4.3Public exploit code
CVE-2004-2725
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities2004-11-12 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aztek Forum | Aztek Forum | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/13202
- http://securitytracker.com/id?1012213
- http://www.osvdb.org/11704
- http://www.osvdb.org/11705
- http://www.osvdb.org/11706
- http://www.securityfocus.com/bid/11654
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18057
- http://secunia.com/advisories/13202
- http://securitytracker.com/id?1012213
- http://www.osvdb.org/11704
- http://www.osvdb.org/11705
- http://www.osvdb.org/11706
- http://www.securityfocus.com/bid/11654
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18057