echo.or.id
http://echo.or.id/adv/adv02-y3dips-2004.txt CVE-2004-2670
eNdonesia 8.3 - Search Form Cross-Site Scripting
Record summary
CVE-2004-2670 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBeNdonesia 8.3 - Search Form Cross-Site ScriptingExploitDB exploitby Ahmad MuammarNot analyzed1 file
References
812231Third-party advisory
http://secunia.com/advisories/12231 1010864vdb entry
http://securitytracker.com/id?1010864 20040804 Multiple vulnerabilities in eNdonesia CMSmailing list
http://www.securityfocus.com/archive/1/370855 10856vdb entry
http://www.securityfocus.com/bid/10856 8506vdb entry
http://www.securityfocus.com/bid/8506 endonesia-mod-xss(13041)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13041 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-2670