4.3
CVE-2004-1651
- EPSS 1.34%
- Veröffentlicht 31.08.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:08:08
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Brickhost ≫ Phpscheduleit Version1.0_rc1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.34% | 0.676 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://archives.neohapsis.com/archives/bugtraq/2004-09/0216.html
http://marc.info/?l=bugtraq&m=109399590602709&w=2
http://securitytracker.com/id?1011127
http://www.osvdb.org/9451
http://www.securityfocus.com/bid/11080
https://exchange.xforce.ibmcloud.com/vulnerabilities/17193
https://exchange.xforce.ibmcloud.com/vulnerabilities/17194