Lucene search

[email protected]CVE-2004-2511

HistoryOct 25, 2005 - 4:00 a.m.

CVE-2004-2511

2005-10-2504:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2511

cross-site scripting

xss

dcp-portal

security vulnerability

remote attack

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php.

Affected configurations

NVD

Node

codeworx_technologiesdcp-portalRange≤5.3.2

codeworx_technologiesdcp-portalMatch3.7

codeworx_technologiesdcp-portalMatch4.0

codeworx_technologiesdcp-portalMatch4.1

codeworx_technologiesdcp-portalMatch4.2

codeworx_technologiesdcp-portalMatch4.5.1

codeworx_technologiesdcp-portalMatch5.0.1

codeworx_technologiesdcp-portalMatch5.0.2

codeworx_technologiesdcp-portalMatch5.1

codeworx_technologiesdcp-portalMatch5.2

codeworx_technologiesdcp-portalMatch5.3

codeworx_technologiesdcp-portalMatch5.3.1

CPENameOperatorVersion
codeworx_technologies:dcp-portalcodeworx technologies dcp-portalle5.3.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq3.7
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.0
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.5.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.2

CPE	Name	Operator	Version
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	le	5.3.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	3.7
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.0
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.5.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.2

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/bugtraq/2004-10/0042.html

secunia.com/advisories/12751

securitytracker.com/id?1006351

www.osvdb.org/10585

www.osvdb.org/10587

www.osvdb.org/10588

www.osvdb.org/10589

www.osvdb.org/10590

www.osvdb.org/11405

www.securityfocus.com/bid/11338

www.securityfocus.com/bid/11339

exchange.xforce.ibmcloud.com/vulnerabilities/17638

exchange.xforce.ibmcloud.com/vulnerabilities/17639

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON

Related for CVE-2004-2511

cvelist2 nvd2 prion1 nessus1 cve1 openvas1