CVE-2003-0404 | BDVDB-2026-5560 Detail

Description#

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iss.net/security_center/static/12071.php
http://marc.info/?l=bugtraq&m=105406028027360&w=2
http://www.securityfocus.com/bid/7687
http://www.s21sec.com/es/avisos/s21sec-023-en.txt

Exploit#

No public exploit known

History#

Version 12003-06-11Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.