![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2004-2725 |
Description: | Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.15785 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2004-2725 BugTraq ID: 11654 http://www.securityfocus.com/bid/11654 http://www.osvdb.org/11704 http://www.osvdb.org/11705 http://www.osvdb.org/11706 http://securitytracker.com/id?1012213 http://secunia.com/advisories/13202 XForce ISS Database: aztek-forum-xss(18057) https://exchange.xforce.ibmcloud.com/vulnerabilities/18057 |