CVE-2004-1441 Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter.
HighCVSS 9.3
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| board power | = 2.04pf | No fix listed |
References
- 20040715 XSS in Board Power forum exploit mailing-list
- VU#744590 third-party-advisory us-government-resource
- 10734 exploit vdb-entry
- boardpower-icq-xss(16698) vdb-entry