vulnwire
4.3med

CVE-2004-16452 exploits

Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.6%
percentile 90%
Public exploits
2
Exploit-DB

Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.

Exploit prediction (EPSS)

3.65% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

Exploits and detections

  • EDB-24418 Xedus Web Server 1.0 - testgetrequest.x 'Username' Cross-Site Scripting · remote · 2004-09-30
  • EDB-24417 Xedus Web Server 1.0 - test.x 'Username' Cross-Site Scripting · remote · 2004-09-30

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

References

  • marc.info /?l=bugtraq&m=109394018411394&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • gulftech.org /?node=research&article_id=00047-08302004 · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17166 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/12418 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/11071 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.