Description

Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.

Remediation

References

CVE-2004-2031

Related Vulnerabilities

Oracle HTTP Server CVE-2016-3482 Vulnerability (CVE-2016-3482)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-12165)

Caddy Web Server Improper Input Validation Vulnerability (CVE-2026-27590)

Moodle Other Vulnerability (CVE-2006-4939)

PHP Other Vulnerability (CVE-2015-8876)

Severity

Medium

Classification

CVE-2004-2031

Tags

Missing Update Known Vulnerabilities