Lucene search

K
cveMitreCVE-2004-1746
HistoryFeb 26, 2005 - 5:00 a.m.

CVE-2004-1746

2005-02-2605:00:00
mitre
web.nvd.nist.gov
23
cve-2004-1746
xss
web script injection
html injection
index.php
php code snippet library

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.008

Percentile

81.6%

Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.

Affected configurations

Nvd
Node
php_code_snippet_libraryphp_code_snippet_libraryMatch0.8
VendorProductVersionCPE
php_code_snippet_libraryphp_code_snippet_library0.8cpe:2.3:a:php_code_snippet_library:php_code_snippet_library:0.8:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.008

Percentile

81.6%

Related for CVE-2004-1746