CVE-2004-1512

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.

Affected (1)

Products: Soft3304: 04webserver

Soft3304

1 product

04webserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Soft3304 04webserver	Version 1.42

References (14)

http://marc.info/?l=bugtraq&m=110012542615484&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110054395311823&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13159/

Source: cve@mitre.org

Vendor Advisory

http://www.security.org.sg/vuln/04webserver142.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/11652

Source: cve@mitre.org

ExploitPatch

http://www.soft3304.net/04WebServer/Security.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18033

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110012542615484&w=2