CVE-2004-1746

PHP Code Snippet Library - Cross-Site Scripting via cat_select or show Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1746. PoCs published by Nikyt0x Argentina.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in PHP Code Snippet Library due to improper sanitization of user-supplied URI input. It includes example URLs demonstrating how an attacker could craft malicious links to execute arbitrary script code in the context of the affected site.

Description

Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Nikyt0x Argentina · textwebappsphp
https://www.exploit-db.com/exploits/24410

The provided text describes a cross-site scripting (XSS) vulnerability in PHP Code Snippet Library due to improper sanitization of user-supplied URI input. It includes example URLs demonstrating how an attacker could craft malicious links to execute arbitrary script code in the context of the affected site.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: PHP Code Snippet Library (version not specified)
No auth needed
Prerequisites: Victim must follow a crafted malicious URL
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11038
Various Sources x_refsource_misc
http://nikyt0x.webcindario.com/0001.txt
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/12370
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17108
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109340580218818&w=2

Scores

EPSS 0.0360
EPSS Percentile 88.3%

Details

Status published
Products (1)
php_code_snippet_library/php_code_snippet_library 0.8
Published Dec 31, 2004
Tracked Since Feb 18, 2026