CVE-2004-2096

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.

Affected (3)

Products: Mephistoles Internet Suite: Mephistoles Httpd

Mephistoles Internet Suite

1 product

Mephistoles Httpd

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mephistoles Internet Suite Mephistoles Httpd	Version 0.6_final
Mephistoles Internet Suite Mephistoles Httpd	Version 0.6_p1
Mephistoles Internet Suite Mephistoles Httpd	Version 0.6_p2