PT-2004-2507 · Coolphp · Coolphp

R00Tcr4Ck · Published 2004-10-16 · Updated 2017-07-11 · CVE-2004-1599

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CoolPHP version 1.0-stable

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to execute arbitrary web script or HTML. The vulnerability can be exploited via the query or nick parameters.

Recommendations For CoolPHP version 1.0-stable, update the index.php file to properly sanitize the query and nick parameters to prevent XSS attacks. As a temporary workaround, consider restricting access to the index.php file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-1599

Affected Products

Coolphp

References · 6

• 🔥 http://securitytracker.com/id?1011748 · Exploit
• 🔥 http://secunia.com/advisories/12850 · Exploit
• 🔥 http://securityfocus.com/bid/11437 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1599 · Security Note
• http://marc.info/?l=bugtraq&m=109810941419669&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17742 · Note