Description

Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.

Remediation

References

CVE-2004-2031

Related Vulnerabilities

WebLogic Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2018-10237)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0060)

Apache HTTP Server Other Vulnerability (CVE-2005-2728)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4608)

WordPress Plugin Kama Click Counter SQL Injection (3.4.9)

Severity

Medium

Classification

CVE-2004-2031

Tags

Missing Update Known Vulnerabilities