Vulnerabilities > CVE-2004-2332 - HTML Injection vulnerability in Cpan WWW Form 1.12

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

cpan

NVD

Published: 2004-12-31

Updated: 2017-07-11

Summary

Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

Vulnerable Configurations

Part	Description	Count
Application	Cpan Cpan WWW Form 1.12	1

References

http://secunia.com/advisories/10751
http://www.securiteam.com/unixfocus/5IP0L2KBPM.html
http://www.securityfocus.com/bid/9526
https://exchange.xforce.ibmcloud.com/vulnerabilities/14985