CVE-2004-2171

UNKNOWN

Cross-site scripting (XSS) vulnerability in Cherokee before 0

Published Jul 10, 2005

Modified 1 years ago

Details

Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page.

References

ADVISORY

http://secunia.com/advisories/10701/

WEB

http://www.osvdb.org/3707

WEB

http://www.securityfocus.com/bid/9496

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/14936

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2004-2171

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJul 10, 2005

ModifiedAug 8, 2024