CVE-2004-0678

Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Weaknesses

CWE-79

Affected products

• Chat Server (12planet)

References

• http://marc.info/?l=bugtraq&m=108904648728706&w=2
• http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt
• http://www.securityfocus.com/bid/10659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16605