CVE-2004-2651

Exploit

EPSS 1.48%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 16.06.2026 22:10:03
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

NVD 25 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Michael Christen ≫ Yacy Version0.1_build2004-01-19

Michael Christen ≫ Yacy Version0.11_build2004-01-24

Michael Christen ≫ Yacy Version0.12_build2004-02-04

Michael Christen ≫ Yacy Version0.13_build2004-02-10

Michael Christen ≫ Yacy Version0.14_build2004-02-13

Michael Christen ≫ Yacy Version0.15_build2004-03-18

Michael Christen ≫ Yacy Version0.16_build2004-05-03

Michael Christen ≫ Yacy Version0.20_build2004-06-14

Michael Christen ≫ Yacy Version0.21_build2004-06-27

Michael Christen ≫ Yacy Version0.22_build2004-07-11

Michael Christen ≫ Yacy Version0.23_build2004-08-08

Michael Christen ≫ Yacy Version0.24_build2004-08-16

Michael Christen ≫ Yacy Version0.25_build2004-08-22

Michael Christen ≫ Yacy Version0.26_build2004-09-16

Michael Christen ≫ Yacy Version0.27_build2004-09-24

Michael Christen ≫ Yacy Version0.28_build2004-10-01

Michael Christen ≫ Yacy Version0.29_build2004-10-22

Michael Christen ≫ Yacy Version0.30_build2004-11-25

Michael Christen ≫ Yacy Version0.31_build2004-12-09

Michael Christen ≫ Yacy Versionbuild2003-12-15

Michael Christen ≫ Yacy Versionbuild2003-12-18

Michael Christen ≫ Yacy Versionbuild2003-12-29

Michael Christen ≫ Yacy Versionbuild2004-01-05

Michael Christen ≫ Yacy Versionbuild2004-01-07

Michael Christen ≫ Yacy Versionbuild2004-01-10

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.48%	0.705

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html

Vendor Advisory

Exploit

http://securitytracker.com/id?1012686

Patch

Exploit

http://www.osvdb.org/12629

http://www.osvdb.org/12630

Patch

Exploit

http://www.securityfocus.com/bid/12104

Exploit

http://www.yacy.net/yacy/News.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/18688

https://exchange.xforce.ibmcloud.com/vulnerabilities/18690

https://nvd.nist.gov/vuln/detail/CVE-2004-2651

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2651

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2651

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-2651