CVE-2004-0660
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CuteNews 1.3.1版本的(1) show_archives.php， (2) show_news.php和可能其他的php文件存在跨站脚本攻击(XSS)漏洞。远程攻击者借助id参数注入任意脚本或HTML。
Public Exploits 5
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2004-0660
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
CuteNews多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CuteNews 1.3.1版本的(1) show_archives.php， (2) show_news.php和可能其他的php文件存在跨站脚本攻击(XSS)漏洞。远程攻击者借助id参数注入任意脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2004-0660
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-0660
请登录查看更多情报信息。
Vendor Advisories for CVE-2004-0660 (1)
Mailing List Discussions for CVE-2004-0660 (1)
Other References for CVE-2004-0660 (1)
-
http://www.swp-zone.org/archivos/advisory-06.txt x_refsource_MISC
Same Patch Batch · n/a · 2004-07-13 · 39 CVEs total
| CVE-2004-0676 | Fastream NETFile FTP/Web Server输入验证错误漏洞 | |
| CVE-2004-0667 | RSBAC 安全漏洞 | |
| CVE-2004-0668 | IBM Lotus Domino Server Web访问恶意邮件查看远程拒绝服务漏洞 | |
| CVE-2004-0669 | IBM Lotus Domino IMAP存储空间限额可更改漏洞 | |
| CVE-2004-0670 | ZyXEL Prestige Router验证密码字段远程拒绝服务漏洞 | |
| CVE-2004-0671 | Symantec Brightmail Anti-spam未授权信息泄露漏洞 | |
| CVE-2004-0672 | Netegrity IdentityMinder Web Edition 跨站脚本(XSS)漏洞 | |
| CVE-2004-0673 | SCI Photo聊天服务器跨站脚本漏洞 | |
| CVE-2004-0674 | Enterasys XSR Security路由器记录路由远程拒绝服务漏洞 | |
| CVE-2004-0675 | McMurtrey/Whitaker & Associates Cart32 GetLatestBuilds脚本跨站脚本攻击漏洞 | |
| CVE-2004-0666 | Popclient电子邮件信息缓冲区溢出漏洞 | |
| CVE-2004-0677 | Fastream NETFile FTP 服务器服务拒绝漏洞 | |
| CVE-2004-0678 | 12Planet Chat Server跨站脚本漏洞 | |
| CVE-2004-0679 | Unreal IRCD Cloak.C IP地址泄露漏洞 | |
| CVE-2004-0680 | Zoom Model 5560 X3 Ethernet ADSL Modem默认后门帐户漏洞 | |
| CVE-2004-0681 | Comersus Open Technologies Comersus Cart多个安全漏洞 | |
| CVE-2004-0682 | Comersus Open Technologies Comersus Cart多个安全漏洞 | |
| CVE-2004-0683 | Symantec Norton AntiVirus 2002 and 2003 服务拒绝漏洞 | |
| CVE-2004-0684 | WebSphere Edge Component Caching Proxy服务拒绝漏洞 | |
| CVE-2004-0656 | PureFTPd Accept_Client远程拒绝服务漏洞 |
Showing top 20 of 39 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2004-0660
No comments yet