CVE-2004-1512

Published Dec 31, 2004

Last updated 8 years ago

Overview

Description: Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6068B76-8085-4942-9872-D69E82AF9D19"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References