CVE-2004-2484 Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to (1) event.php or (2) index.p...
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to (1) event.php or (2) index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php gift registry phpgiftreg | = 1.0.2 | No fix listed |
| php gift registry phpgiftreg | = 1.1.0 | No fix listed |
| php gift registry phpgiftreg | = 1.2.0 | No fix listed |
| php gift registry phpgiftreg | = 1.3.0 | No fix listed |
| php gift registry phpgiftreg | = 1.3.1 | No fix listed |
| php gift registry phpgiftreg | = 1.3.2 | No fix listed |
| php gift registry phpgiftreg | = 1.3.3 | No fix listed |
| php gift registry phpgiftreg | = 1.3.4 | No fix listed |
| php gift registry phpgiftreg | = 1.3.5 | No fix listed |
References
- cvs.sourceforge.net
- cvs.sourceforge.net
- 13414 patch third-party-advisory vendor-advisory
- sourceforge.net patch
- 12286 patch vdb-entry
- 12287 patch vdb-entry
- 11879 patch vdb-entry
- phpgiftregistry-message-xss(18412) vdb-entry