CVE-2004-0358 | BDVDB-2026-6294 Detail

Description#

Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed parameter during the newslogo_upload action in admin.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=107851556116088&w=2
http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15402
http://www.securityfocus.com/bid/9812
http://www.securityfocus.com/bid/9819

Exploit#

No public exploit known

History#

Version 12004-03-18Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.