Vulnerabilities > CVE-2004-1442 - Unspecified vulnerability in IBM Net.Data 7.0/7.2

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ibm
exploit available
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as "DTWP001E."

Vulnerable Configurations

Part Description Count
Application
Ibm
2

Exploit-Db

descriptionIBM Net.Data 7.0/7.2 db2www Error Message Cross-Site Scripting Vulnerability. CVE-2004-1442. Remote exploits for multiple platform
idEDB-ID:23598
last seen2016-02-02
modified2004-01-26
published2004-01-26
reporterCarsten Eiram
sourcehttps://www.exploit-db.com/download/23598/
titleIBM Net.Data 7.0/7.2 db2www Error Message Cross-Site Scripting Vulnerability

References