CVE-2004-1825 Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_cha...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mambo open source | = 4.5_1.0.0 | No fix listed |
| mambo open source | = 4.5_1.0.1 | No fix listed |
References
- 20040316 Mambo Open Source Multiple Vulnerabilities mailing-list
- 11140 exploit patch third-party-advisory vendor-advisory
- 4308 vdb-entry
- 4665 exploit patch vdb-entry vendor-advisory
- 9890 vdb-entry vendor-advisory
- mambo-return-moschangetemplate-xss(15499) vdb-entry