CVE-2004-1659

Published: Sep 2, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.

Affected (5)

Products: Cutephp: Cutenews

Cutephp

1 product

Cutenews

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cutephp Cutenews	Version 0.88
Cutephp Cutenews	Version 1.3.1
Cutephp Cutenews	Version 1.3.2
Cutephp Cutenews	Version 1.3.6
Cutephp Cutenews	Version 1.3

References (8)

http://marc.info/?l=bugtraq&m=109415338521881&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12432

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/11097

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17214

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109415338521881&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12432

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/11097

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17214

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.