Cross-Site Scripting Vulnerability in SCT Campus Pipeline by SCT
CVE-2004-1593

Currently unrated

Key Information:

Vendor: Sct Corporation
Status: Campus Pipeline
Vendor: CVE Published:; 31 December 2004

🔔 Create Sct Corporation Vulnerability Alert

What is CVE-2004-1593?

A cross-site scripting (XSS) vulnerability exists in the SCT Campus Pipeline's render.UserLayoutRootNode.uP function, allowing remote attackers to inject arbitrary web scripts or HTML. This is achieved via manipulation of the utf parameter in user requests, posing significant security risks as attackers can exploit this to execute harmful scripts in the context of the victim's browser.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17704

vdb-entryx_refsource_XF

http://marc.info/?l=bugtraq&m=109768337007983&w=2

mailing-listx_refsource_BUGTRAQ

http://secunia.com/advisories/12826

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Feb 20, 2005
Vulnerability published
Dec 31, 2004

CVE-2004-1593 Data

JSON