CVE-2004-2171

UNKNOWN

Cross-site scripting (XSS) vulnerability in Cherokee before 0

Published Jul 10, 2005

Modified 1 years ago

No fix available

Details

Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page.

References

ADVISORYhttp://secunia.com/advisories/10701/WEBhttp://www.osvdb.org/3707 WEBhttp://www.securityfocus.com/bid/9496 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/14936 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2004-2171

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJul 10, 2005

ModifiedAug 8, 2024