CVE-2004-2028: XSS
Published May 21, 2004
·Updated
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.
Affected Software
11 affected components
e107 e107=0.6_10
e107 e107=0.6_11
e107 e107=0.6_12
e107 e107=0.6_13
e107 e107=0.6_14
e107 e107=0.6_15
e107 e107=0.6_15a
e107 e107=0.545
e107 e107=0.554
e107 e107=0.555_beta
e107 e107=0.603
Event History
May 21, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2028?
CVE-2004-2028 is considered a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
2
How do I fix CVE-2004-2028?
To fix CVE-2004-2028, upgrade your e107 CMS to a version that has patched this vulnerability.
3
What versions of e107 CMS are affected by CVE-2004-2028?
CVE-2004-2028 affects e107 CMS versions 0.6_10 to 0.603.
4
What type of attack does CVE-2004-2028 facilitate?
CVE-2004-2028 facilitates cross-site scripting (XSS) attacks by allowing remote attackers to inject arbitrary scripts.
5
Is CVE-2004-2028 easy to exploit?
Yes, CVE-2004-2028 is relatively easy to exploit, making it crucial for affected users to apply updates promptly.