CVE-2004-2162 Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to....
MediumCVSS 4.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tutos | = 1.1_2004-04-14 | No fix listed |
References
- cvs.sourceforge.net
- 12606 patch third-party-advisory vendor-advisory
- 18954 third-party-advisory
- DSA-980 vendor-advisory
- 20040918 Vulnerabilities in TUTOS exploit mailing-list vendor-advisory
- 11221 vdb-entry
- tutos-xss(17445) vdb-entry