4.3
CVE-2004-2096
- EPSS 1.81%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:00
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mephistoles Internet Suite ≫ Mephistoles Httpd Version0.6_final
Mephistoles Internet Suite ≫ Mephistoles Httpd Version0.6_p1
Mephistoles Internet Suite ≫ Mephistoles Httpd Version0.6_p2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.81% | 0.758 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://marc.info/?l=bugtraq&m=107470433714179&w=2
http://secunia.com/advisories/10693
http://www.osvdb.org/3689
http://www.securityfocus.com/bid/9470
https://exchange.xforce.ibmcloud.com/vulnerabilities/14899