CVE-2004-2566

LiveWorld LiveChat LiveForum LiveQ&A LiveFocusGroup - Cross-Site Scripting via q Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2566. PoCs published by GulfTech Security.

AI-analyzed exploit summary This is a writeup describing a Cross-Site Scripting (XSS) vulnerability in multiple LiveWorld products. It includes proof-of-concept URLs demonstrating the vulnerability but does not contain executable exploit code.

Description

Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa.

Exploits (1)

exploitdb WRITEUP
by GulfTech Security · textwebappsasp
https://www.exploit-db.com/exploits/43815

This is a writeup describing a Cross-Site Scripting (XSS) vulnerability in multiple LiveWorld products. It includes proof-of-concept URLs demonstrating the vulnerability but does not contain executable exploit code.

Classification
Writeup 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: LiveWorld products (LiveForum, LiveQ&A, LiveChat, LiveFocusGroup)
No auth needed
Prerequisites: Access to a vulnerable LiveWorld application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17104
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1011036
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/9180

Scores

EPSS 0.0174
EPSS Percentile 74.7%

Details

Status published
Products (4)
liveworld/livechat
liveworld/livefocusgroup
liveworld/liveforum
liveworld/liveq_and_a
Published Dec 31, 2004
Tracked Since Feb 18, 2026