CVE-2004-2138

Published: Dec 31, 2004Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the (1) Name, (2) Email, (3) Homepage or (4) Comments field.

Affected (1)

Products: Allwebscripts: Mysqlguest

Allwebscripts

1 product

Mysqlguest

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Allwebscripts Mysqlguest	All versions

References (8)

http://securitytracker.com/id?1011376

Source: cve@mitre.org

http://www.computerknights.org/forum_viewtopic.php?2.122

Source: cve@mitre.org

ExploitURL Repurposed

http://www.securityfocus.com/bid/11234

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17462

Source: cve@mitre.org

http://securitytracker.com/id?1011376

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.computerknights.org/forum_viewtopic.php?2.122

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitURL Repurposed

http://www.securityfocus.com/bid/11234

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/17462

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.