CVE

Id
9991  
CVE No.
CVE-2004-1563  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68426 9991 CVE-2004-1563 BUGTRAQ:20040930 Multiple vulnerabilities in w-agora forum  View
68427 9991 CVE-2004-1563 URL:http://marc.info/?l=bugtraq&m=109655691512298&w=2  View
68428 9991 CVE-2004-1563 FULLDISC:20040930 Multiple vulnerabilities in w-agora forum  View
68429 9991 CVE-2004-1563 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html  View
68430 9991 CVE-2004-1563 BID:11283  View
68431 9991 CVE-2004-1563 URL:http://www.securityfocus.com/bid/11283  View
68432 9991 CVE-2004-1563 SECTRACK:1011463  View
68433 9991 CVE-2004-1563 URL:http://securitytracker.com/id?1011463  View
68434 9991 CVE-2004-1563 SECUNIA:12695  View
68435 9991 CVE-2004-1563 URL:http://secunia.com/advisories/12695  View
68436 9991 CVE-2004-1563 XF:wagora-get-post-xss(17553)  View

Related JVN