Vulnerabilities > CVE-2003-0404 - Unspecified vulnerability in Vignette Content Suite, Storyserver and Vignette

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
vignette
exploit available
NVD
Published: 2003-06-30
Updated: 2024-11-20

Summary

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

Vulnerable Configurations

Part Description Count
Application
Vignette
7

Exploit-Db

descriptionVignette 4/5 Cross-Site Scripting Vulnerabilities. CVE-2003-0404. Remote exploit for unix platform
idEDB-ID:22648
last seen2016-02-02
modified2003-05-26
published2003-05-26
reporterRamon Pinuaga Cascales
sourcehttps://www.exploit-db.com/download/22648/
titleVignette 4/5 - Cross-Site Scripting Vulnerabilities

References