CVE-2004-2040
- State
- Published
- Severity
- Not scored
- Published
- May 10, 2005
- Updated
- Aug 8, 2024
- Reserved
- May 4, 2005
Description
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) "email article to a friend" field, (3) "submit news" field, or (4) avmsg parameter to usersettings.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 6529vdb-entry
- http://www.waraxe.us/index.php?modname=sa&id=31
- 10436vdb-entry
- 6527vdb-entry
- 6528vdb-entry
- e107-clock-menu-xss(16279)vdb-entry
- e107-email-friend-xss(16280)vdb-entry
- 11740third-party-advisory
- e107-user-setting-xss(16281)vdb-entry
- 6526vdb-entry
- 20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615]mailing-list
- 20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615]mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.