CVE-2004-2028

e107 - Cross-Site Scripting via Referer Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2028. PoCs published by Chinchilla.

AI-analyzed exploit summary The provided text describes a remote HTML injection vulnerability in the e107 website system, specifically in the log.php script, due to improper sanitization of user-supplied input via the 'referer' URI parameter. This allows attackers to inject malicious HTML or script code, which is rendered when the log page is viewed.

Description

Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Chinchilla · textwebappsphp
https://www.exploit-db.com/exploits/24138

The provided text describes a remote HTML injection vulnerability in the e107 website system, specifically in the log.php script, due to improper sanitization of user-supplied input via the 'referer' URI parameter. This allows attackers to inject malicious HTML or script code, which is rendered when the log page is viewed.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: e107 website system
No auth needed
Prerequisites: Access to the vulnerable log.php script
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/11693
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/6345
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108515632622796&w=2
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10395
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16231

Scores

EPSS 0.0351
EPSS Percentile 88.0%

Details

Status published
Products (11)
e107/e107 0.6_10
e107/e107 0.6_11
e107/e107 0.6_12
e107/e107 0.6_13
e107/e107 0.6_14
e107/e107 0.6_15
e107/e107 0.6_15a
e107/e107 0.545
e107/e107 0.554
e107/e107 0.555_beta
... and 1 more
Published May 21, 2004
Tracked Since Feb 18, 2026