Vulnerabilities > CVE-2004-1418
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN exploit available
Summary
Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Wirtualna Polska WPKontakt 3.0.1 Remote Script Execution Vulnerability. CVE-2004-1418. Webapps exploit for cgi platform |
| id | EDB-ID:25051 |
| last seen | 2016-02-03 |
| modified | 2004-12-23 |
| published | 2004-12-23 |
| reporter | Poznan Supercomputing |
| source | https://www.exploit-db.com/download/25051/ |
| title | Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution Vulnerability |