PT-2004-2927 · E107 · E107

Chris Norton · Published 2004-05-21 · Updated 2017-07-11 · CVE-2004-2031

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions e107 (affected versions not specified)

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the URL, MSN, or AIM fields in user.php.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2031

Affected Products

E107

References · 7

• 🔥 http://osvdb.org/6410 · Exploit
• 🔥 http://securityfocus.com/bid/10405 · Exploit
• http://secunia.com/advisories/11696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2031 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16241 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2031 · Note
• http://marc.info/?l=bugtraq&m=108541119526279&w=2 · Note