CVE-2004-1418 - Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated

Published Feb 12, 2005

4.3

MEDIUM

CVSS 2.0

EPSS 1.79%

Description

Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://marc.info/?l=bugtraq&m=110384387332443&w=2
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/12097
vdb-entryx_refsource_BIDExploitPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18685
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=110384387332443&w=2		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/12097		vdb-entryx_refsource_BIDExploitPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18685		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 12, 2005

Updated Aug 8, 2024

Reserved Feb 12, 2005

Link CVE-2004-1418

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-1418

Red Hat

Severity n/a

Public date n/a

Links CVE-2004-1418