CVE-2004-1645

2005-02-2005:00:00

mitre

www.cve.org

6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.

References

marc.info/?l=bugtraq&m=109394018411394&w=2

secunia.com/advisories/12418

www.gulftech.org/?node=research&article_id=00047-08302004

www.securityfocus.com/bid/11071

exchange.xforce.ibmcloud.com/vulnerabilities/17166