CVE-2004-1640: XSS
First published: Sat Aug 28 2004(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xoops Xoops Dictionary | =1.0 | |
| Xoops Xoops Dictionary | =0.94 | |
| Xoops Xoops Dictionary | =0.94 | |
| Xoops Xoops Dictionary | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/11064
- http://secunia.com/advisories/12424
- http://cyruxnet.org/modulo_dic_xoops.htm
- http://www.osvdb.org/9393
- http://www.osvdb.org/9394
- http://marc.info/?l=bugtraq&m=109394077209963&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17152
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/xoops
- canonical/xoops xoops dictionary
- version/xoops xoops dictionary/1.0
- version/xoops xoops dictionary/0.94