CVE-2004-2725 | BDVDB-2026-26720 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/11706
http://www.securityfocus.com/bid/11654
http://www.osvdb.org/11705
http://secunia.com/advisories/13202
http://www.osvdb.org/11704
https://exchange.xforce.ibmcloud.com/vulnerabilities/18057
http://securitytracker.com/id?1012213

Exploit#

No public exploit known

History#

Version 12007-10-06Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.