CVE-2004-2514

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attackers to inject arbitrary web script or HTML via the (1) SUBJECT or (2) MESSAGE field.

Affected (3)

Products: Powerportal: Powerportal

Powerportal

1 product

Powerportal

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Powerportal Powerportal	Version 1.1b
Powerportal Powerportal	Version 1.3
Powerportal Powerportal	Version 1.3b

References (12)

http://securitytracker.com/id?1010802

Source: cve@mitre.org

http://www.osvdb.org/8319

Source: cve@mitre.org

http://www.secure4arab.com/forum/showthread.php?t=302

Source: cve@mitre.org

http://www.securiteam.com/unixfocus/5TP0O2ADFK.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/10835

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/16838

Source: cve@mitre.org

http://securitytracker.com/id?1010802