VulnerabilityModified
CVE-2004-2725
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4)…
MEDIUM 4.3EPSS 1.77%
Does this matter?
Lower severity and a low EPSS score (1.77%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.77% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- aztek forum/aztek forum
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/13202Vendor Advisory
- http://securitytracker.com/id?1012213Exploit
- http://www.osvdb.org/11704
- http://www.osvdb.org/11705
- http://www.osvdb.org/11706
- http://www.securityfocus.com/bid/11654Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18057
- http://secunia.com/advisories/13202Vendor Advisory
- http://securitytracker.com/id?1012213Exploit
- http://www.osvdb.org/11704
- http://www.osvdb.org/11705
- http://www.osvdb.org/11706
- http://www.securityfocus.com/bid/11654Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18057
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.