Cross-Site Scripting Vulnerability in eNdonesia CMS by eNdonesia
CVE-2004-2670

Currently unrated

Key Information:

Vendor

Endonesia

Status
Endonesia
Vendor
CVE Published:
31 December 2004

What is CVE-2004-2670?

Multiple vulnerabilities exist in the eNdonesia CMS version 8.3, specifically in the mod.php file. These vulnerabilities facilitate cross-site scripting (XSS) attacks, enabling remote attackers to inject malicious web scripts or HTML code. Exploitation can occur through two main parameters: the 'mod' parameter during a viewcat operation and the 'query' parameter during a search operation within the publisher module. This vulnerability poses a significant risk to users, allowing unauthorized script execution within the context of user sessions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/archive/1/370855
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/12231
third-party-advisoryx_refsource_SECUNIA
http://echo.or.id/adv/adv02-y3dips-2004.txt
x_refsource_MISC

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.