CVE

Id
10068  
CVE No.
CVE-2004-1640  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.  
Phase
Assigned (20050221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
69094 10068 CVE-2004-1640 BUGTRAQ:20040828 Cross Site Scripting in XOOPS Version 2.x Dictionary module  View
69095 10068 CVE-2004-1640 URL:http://marc.info/?l=bugtraq&m=109394077209963&w=2  View
69096 10068 CVE-2004-1640 MISC:http://cyruxnet.org/modulo_dic_xoops.htm  View
69097 10068 CVE-2004-1640 BID:11064  View
69098 10068 CVE-2004-1640 URL:http://www.securityfocus.com/bid/11064  View
69099 10068 CVE-2004-1640 OSVDB:9393  View
69100 10068 CVE-2004-1640 URL:http://www.osvdb.org/9393  View
69101 10068 CVE-2004-1640 OSVDB:9394  View
69102 10068 CVE-2004-1640 URL:http://www.osvdb.org/9394  View
69103 10068 CVE-2004-1640 SECUNIA:12424  View
69104 10068 CVE-2004-1640 URL:http://secunia.com/advisories/12424  View
69105 10068 CVE-2004-1640 XF:xoops-dictionary-letter-xss(17154)  View
69106 10068 CVE-2004-1640 URL:http://xforce.iss.net/xforce/xfdb/17154  View
69107 10068 CVE-2004-1640 XF:xoops-dictionary-search-xss(17152)  View

Related JVN