CVE-2004-2085 Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) th...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brad fears phpcodecabinet | = 0.1 | No fix listed |
| brad fears phpcodecabinet | = 0.2 | No fix listed |
| brad fears phpcodecabinet | = 0.3 | No fix listed |
| brad fears phpcodecabinet | = 0.4 | No fix listed |
References
- cvs.sourceforge.net vendor-advisory
- cvs.sourceforge.net vendor-advisory
- cvs.sourceforge.net vendor-advisory
- cvs.sourceforge.net vendor-advisory
- cvs.sourceforge.net vendor-advisory
- cvs.sourceforge.net vendor-advisory
- 10862 third-party-advisory
- 1009012 vdb-entry
- sourceforge.net vendor-advisory
- 16710 vdb-entry
- 16711 vdb-entry
- 3885 vdb-entry vendor-advisory
- 3886 patch vdb-entry vendor-advisory
- 3887 patch vdb-entry vendor-advisory
- 9601 patch vdb-entry vendor-advisory
- 9645 patch vdb-entry vendor-advisory
- phpcodecabinet-multiple-xss(15190) vdb-entry