Lucene search

[email protected]NVD:CVE-2004-2720

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2720

2004-12-3105:00:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

79.2%

JSON

Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.

Affected configurations

Nvd

Node

snitz_communicationssnitz_forums_2000Range≤3.4.04

VendorProductVersionCPE
snitz_communicationssnitz_forums_2000*cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
snitz_communications	snitz_forums_2000	*	cpe:2.3:a:snitz_communications:snitz_forums_2000::::::::

References

forum.snitz.com/forum/topic.asp?TOPIC_ID=53360

secunia.com/advisories/11895

securityreason.com/securityalert/3200

securitytracker.com/id?1010524

www.osvdb.org/7190

www.sec-tec.co.uk/vulnerability/snitzxss.html

www.securityfocus.com/archive/1/366309

www.securityfocus.com/bid/10564

exchange.xforce.ibmcloud.com/vulnerabilities/16444

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

79.2%

JSON

Related for NVD:CVE-2004-2720

cve1 exploitdb1 cvelist1