Lucene search

[email protected]CVE-2004-1566

HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1566

2005-02-2005:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1566

cross-site scripting

xss

silent storm portal

index.php

web security

html

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.

Affected configurations

NVD

Node

silent-stormsilent-storm_portalMatch2.1

silent-stormsilent-storm_portalMatch2.2

CPENameOperatorVersion
silent-storm:silent-storm_portalsilent-storm silent-storm portaleq2.1
silent-storm:silent-storm_portalsilent-storm silent-storm portaleq2.2

CPE	Name	Operator	Version
silent-storm:silent-storm_portal	silent-storm silent-storm portal	eq	2.1
silent-storm:silent-storm_portal	silent-storm silent-storm portal	eq	2.2

References

marc.info/?l=bugtraq&m=109655763808924&w=2

secunia.com/advisories/12704

securitytracker.com/id?1011470

www.securityfocus.com/bid/11284

exchange.xforce.ibmcloud.com/vulnerabilities/17554

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON

Related for CVE-2004-1566

cvelist1 nvd1 nessus1