PT-2004-1760 · Sci · Sci Photo Chat Server

Publicado 2004-07-13 · Atualizado 2017-07-11 · CVE-2004-0673

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SCI Photo Chat Server version 3.4.9

Description A cross-site scripting (XSS) issue allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message. This occurs when the server responds to an invalid request by including it in the error message, thus allowing the execution of malicious scripts.

Recommendations For SCI Photo Chat Server version 3.4.9, update to a newer version that addresses this issue, as using outdated software can pose significant security risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-0673

Produtos afetados

Sci Photo Chat Server

Referências · 5

• 🔥 http://securityfocus.com/bid/10648 · Exploit
• 🔥 https://exploit-db.com/exploits/24246 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0673 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16602 · Nota
• http://marc.info/?l=bugtraq&m=108880460730833&w=2 · Nota