CVE-2004-1837

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings.

Affected (26)

Products: Joel Palmius: Mod Survey

Joel Palmius

1 product

Mod Survey

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Joel Palmius Mod Survey	Version 3.0.0
Joel Palmius Mod Survey	Version 3.0.10
Joel Palmius Mod Survey	Version 3.0.11
Joel Palmius Mod Survey	Version 3.0.12
Joel Palmius Mod Survey	Version 3.0.13
Joel Palmius Mod Survey	Version 3.0.14
Joel Palmius Mod Survey	Version 3.0.14d
Joel Palmius Mod Survey	Version 3.0.14e
Joel Palmius Mod Survey	Version 3.0.15
Joel Palmius Mod Survey	Version 3.0.15_pre1
Joel Palmius Mod Survey	Version 3.0.15_pre2
Joel Palmius Mod Survey	Version 3.0.15_pre3
Joel Palmius Mod Survey	Version 3.0.15_pre4
Joel Palmius Mod Survey	Version 3.0.15_pre5
Joel Palmius Mod Survey	Version 3.0.15_pre6
Joel Palmius Mod Survey	Version 3.0.16_pre1
Joel Palmius Mod Survey	Version 3.0.1
Joel Palmius Mod Survey	Version 3.0.2
Joel Palmius Mod Survey	Version 3.0.3
Joel Palmius Mod Survey	Version 3.0.4
Joel Palmius Mod Survey	Version 3.0.5
Joel Palmius Mod Survey	Version 3.0.6
Joel Palmius Mod Survey	Version 3.0.9
Joel Palmius Mod Survey	Version 3.2.0_pre1
Joel Palmius Mod Survey	Version 3.2.0_pre2
Joel Palmius Mod Survey	Version 3.2.0_pre3