PT-2004-1760 · Sci · Sci Photo Chat Server

Published 2004-07-13 · Updated 2017-07-11 · CVE-2004-0673

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SCI Photo Chat Server version 3.4.9

Description A cross-site scripting (XSS) issue allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message. This occurs when the server responds to an invalid request by including it in the error message, thus allowing the execution of malicious scripts.

Recommendations For SCI Photo Chat Server version 3.4.9, update to a newer version that addresses this issue, as using outdated software can pose significant security risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-0673

Affected Products

Sci Photo Chat Server

References · 5

• 🔥 http://securityfocus.com/bid/10648 · Exploit
• 🔥 https://exploit-db.com/exploits/24246 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0673 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16602 · Note
• http://marc.info/?l=bugtraq&m=108880460730833&w=2 · Note