CVE-2004-1692 Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mambo open source | = 4.5_1.0.9 | No fix listed |
References
- mamboforge.net patch
- 20040918 Vulnerabilities in TUTOS mailing-list
- 10179 exploit patch vdb-entry vendor-advisory
- 11220 exploit patch vdb-entry vendor-advisory
- mambo-multiple-xss(20616) vdb-entry