CVE-2004-1645 Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x,....
MediumCVSS 4.3
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jerod moemeka xedus | = 1.0 | No fix listed |
References
- 20040830 Multiple Vulnerabilities In Xedus Webserver mailing-list
- 12418 exploit third-party-advisory vendor-advisory
- www.gulftech.org
- 11071 exploit vdb-entry vendor-advisory
- xedus-test-xss(17166) vdb-entry