CVE-2004-2563

Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters.

Score

CVSS 2.0 5.8 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Serena Teamtrack (Serena Software)

References

• http://secunia.com/advisories/12122
• http://www.osvdb.org/8182
• http://www.osvdb.org/8183
• http://www.osvdb.org/8185
• http://www.securiteam.com/windowsntfocus/5SP0O0ADGG.html
• http://www.securityfocus.com/bid/10770
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16771
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16777