CVE-2004-2031: XSS
Published May 21, 2004
·Updated
Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.
Affected Software
11 affected components
e107 e107=0.545
e107 e107=0.554
e107 e107=0.555_beta
e107 e107=0.603
e107 e107=0.610
e107 e107=0.611
e107 e107=0.612
e107 e107=0.613
e107 e107=0.614
e107 e107=0.615
e107 e107=0.615a
Event History
May 21, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2031?
CVE-2004-2031 is considered a medium severity vulnerability.
2
How do I fix CVE-2004-2031?
To fix CVE-2004-2031, update e107 CMS to a version that is not affected by this vulnerability.
3
What software versions are affected by CVE-2004-2031?
CVE-2004-2031 affects e107 CMS versions 0.545, 0.554, 0.555_beta, 0.603, 0.610, 0.611, 0.612, 0.613, 0.614, 0.615, and 0.615a.
4
What type of attack does CVE-2004-2031 facilitate?
CVE-2004-2031 facilitates cross-site scripting (XSS) attacks.
5
Who is at risk due to CVE-2004-2031?
Users of the affected versions of e107 CMS are at risk of XSS vulnerabilities which can lead to data theft or site defacement.