CVE-2004-1794

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard.

Affected (7)

Products: Vcard4j: Vcard4j

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Vcard4j Vcard4j	Version 0.1
Vcard4j Vcard4j	Version 0.2
Vcard4j Vcard4j	Version 1.0
Vcard4j Vcard4j	Version 1.1.1
Vcard4j Vcard4j	Version 1.1.2
Vcard4j Vcard4j	Version 1.1.3
Vcard4j Vcard4j	Version 1.1

References (8)

http://securitytracker.com/id?1008582

Source: cve@mitre.org

Patch

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/9343

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/14120

Source: cve@mitre.org

http://securitytracker.com/id?1008582

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9343

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/14120

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.