CVE-2004-2603

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php.

Affected (8)

Products: Ubertec: Help Center Live

1 product

Help Center Live

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ubertec Help Center Live	Version 1.0
Ubertec Help Center Live	Version 1.2.1
Ubertec Help Center Live	Version 1.2.2
Ubertec Help Center Live	Version 1.2.3
Ubertec Help Center Live	Version 1.2.4
Ubertec Help Center Live	Version 1.2.5
Ubertec Help Center Live	Version 1.2.6
Ubertec Help Center Live	Version 1.2

References (12)

http://secunia.com/advisories/13652

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1012685

Source: cve@mitre.org

Exploit

http://www.gulftech.org/?node=research&article_id=00058-12242004

Source: cve@mitre.org

http://www.osvdb.org/12597

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/12105

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/18696

Source: cve@mitre.org

http://secunia.com/advisories/13652

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1012685

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.gulftech.org/?node=research&article_id=00058-12242004

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/12597

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/12105

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/18696

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.